x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3129.892858] syz-executor.4: attempt to access beyond end of device [ 3129.892858] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3129.894279] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3129.912149] loop3: detected capacity change from 0 to 40 [ 3130.002082] syz-executor.3: attempt to access beyond end of device [ 3130.002082] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3130.003185] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:11:27 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:11:27 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3145.088088] loop4: detected capacity change from 0 to 40 [ 3145.092525] loop6: detected capacity change from 0 to 40 [ 3145.094328] loop0: detected capacity change from 0 to 40 14:11:27 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x0, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:27 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:27 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:27 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3145.099356] FAT-fs (loop6): bogus number of reserved sectors [ 3145.099794] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3145.102070] loop1: detected capacity change from 0 to 40 [ 3145.102119] loop3: detected capacity change from 0 to 40 perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(0x0, 0x40) fremovexattr(r0, &(0x7f0000000540)=@known='system.sockprotoname\x00') [ 3145.113351] loop2: detected capacity change from 0 to 40 [ 3145.170536] loop5: detected capacity change from 0 to 40 [ 3145.217707] syz-executor.0: attempt to access beyond end of device [ 3145.217707] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.218834] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3145.242767] syz-executor.4: attempt to access beyond end of device [ 3145.242767] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.243999] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3145.255404] syz-executor.3: attempt to access beyond end of device [ 3145.255404] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.256617] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3145.316314] syz-executor.2: attempt to access beyond end of device [ 3145.316314] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.317317] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:11:28 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:11:28 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:28 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x0, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3145.414068] syz-executor.5: attempt to access beyond end of device [ 3145.414068] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.415199] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:11:28 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3145.462258] loop0: detected capacity change from 0 to 40 [ 3145.512943] loop2: detected capacity change from 0 to 40 [ 3145.521668] loop3: detected capacity change from 0 to 40 [ 3145.541870] loop4: detected capacity change from 0 to 40 14:11:28 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3145.673883] syz-executor.0: attempt to access beyond end of device [ 3145.673883] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.675768] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3145.699381] loop5: detected capacity change from 0 to 40 [ 3145.712014] syz-executor.4: attempt to access beyond end of device [ 3145.712014] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.713029] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3145.714733] syz-executor.3: attempt to access beyond end of device [ 3145.714733] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.715746] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3145.717951] syz-executor.2: attempt to access beyond end of device [ 3145.717951] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.718940] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:11:28 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3145.911200] loop0: detected capacity change from 0 to 40 [ 3145.918129] syz-executor.5: attempt to access beyond end of device [ 3145.918129] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3145.920157] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:11:41 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:41 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 14:11:41 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:41 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:41 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x0) fremovexattr(r0, &(0x7f0000000540)=@known='system.sockprotoname\x00') [ 3158.912523] loop4: detected capacity change from 0 to 40 [ 3158.919118] loop2: detected capacity change from 0 to 40 [ 3158.926687] loop6: detected capacity change from 0 to 40 14:11:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:41 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3158.943121] loop1: detected capacity change from 0 to 40 [ 3158.943960] loop5: detected capacity change from 0 to 40 [ 3158.947612] loop0: detected capacity change from 0 to 40 [ 3158.965379] FAT-fs (loop6): bogus number of reserved sectors [ 3158.966542] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3158.971070] loop3: detected capacity change from 0 to 40 [ 3159.073116] bio_check_eod: 1 callbacks suppressed [ 3159.073129] syz-executor.0: attempt to access beyond end of device [ 3159.073129] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.074752] buffer_io_error: 1 callbacks suppressed [ 3159.074761] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3159.091379] syz-executor.5: attempt to access beyond end of device [ 3159.091379] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.092416] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:11:41 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) [ 3159.149399] syz-executor.4: attempt to access beyond end of device [ 3159.149399] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.151248] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:11:41 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3159.206255] syz-executor.3: attempt to access beyond end of device [ 3159.206255] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.209216] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3159.215331] syz-executor.2: attempt to access beyond end of device [ 3159.215331] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.217714] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3159.229904] loop0: detected capacity change from 0 to 40 [ 3159.273640] syz-executor.0: attempt to access beyond end of device [ 3159.273640] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.274707] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3159.290371] loop5: detected capacity change from 0 to 40 14:11:42 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 14:11:42 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:42 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3159.423860] syz-executor.5: attempt to access beyond end of device [ 3159.423860] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.425871] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3159.441818] loop0: detected capacity change from 0 to 40 14:11:42 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3159.597968] loop4: detected capacity change from 0 to 40 [ 3159.613036] syz-executor.0: attempt to access beyond end of device [ 3159.613036] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.614657] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3159.615743] loop3: detected capacity change from 0 to 40 14:11:42 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3159.668014] syz-executor.3: attempt to access beyond end of device [ 3159.668014] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.669220] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3159.673222] loop2: detected capacity change from 0 to 40 [ 3159.797562] loop5: detected capacity change from 0 to 40 [ 3159.827089] syz-executor.2: attempt to access beyond end of device [ 3159.827089] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.828171] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:11:58 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:11:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x0) fremovexattr(r0, &(0x7f0000000540)=@known='system.sockprotoname\x00') 14:11:58 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:58 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:58 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:58 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:11:58 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3175.845688] loop6: detected capacity change from 0 to 40 [ 3175.857938] FAT-fs (loop6): bogus number of reserved sectors [ 3175.858806] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3175.864669] loop2: detected capacity change from 0 to 40 [ 3175.870098] loop1: detected capacity change from 0 to 40 [ 3175.874529] loop0: detected capacity change from 0 to 40 [ 3175.886977] loop4: detected capacity change from 0 to 40 [ 3175.891727] loop5: detected capacity change from 0 to 40 [ 3175.909293] loop3: detected capacity change from 0 to 40 [ 3176.176360] bio_check_eod: 2 callbacks suppressed [ 3176.176388] syz-executor.3: attempt to access beyond end of device [ 3176.176388] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.178906] buffer_io_error: 2 callbacks suppressed [ 3176.178964] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3176.228100] syz-executor.4: attempt to access beyond end of device [ 3176.228100] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.229892] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3176.237128] syz-executor.2: attempt to access beyond end of device [ 3176.237128] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.239047] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3176.249774] syz-executor.0: attempt to access beyond end of device [ 3176.249774] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.251503] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3176.282208] syz-executor.5: attempt to access beyond end of device [ 3176.282208] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.284996] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:11:59 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:59 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:59 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "", ['\x00', '\x00']}, 0x220) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:59 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:11:59 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3176.537647] loop3: detected capacity change from 0 to 40 [ 3176.646505] loop4: detected capacity change from 0 to 40 [ 3176.676309] syz-executor.3: attempt to access beyond end of device [ 3176.676309] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.678100] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3176.678576] loop5: detected capacity change from 0 to 40 [ 3176.686027] loop0: detected capacity change from 0 to 40 [ 3176.698318] loop2: detected capacity change from 0 to 40 14:11:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x0) fremovexattr(r0, &(0x7f0000000540)=@known='system.sockprotoname\x00') 14:11:59 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:11:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3176.929009] syz-executor.0: attempt to access beyond end of device [ 3176.929009] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.931171] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:11:59 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3176.945344] syz-executor.5: attempt to access beyond end of device [ 3176.945344] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.947329] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3176.958243] syz-executor.4: attempt to access beyond end of device [ 3176.958243] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.960365] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3176.982052] loop1: detected capacity change from 0 to 40 [ 3176.986232] syz-executor.2: attempt to access beyond end of device [ 3176.986232] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3176.988160] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3177.030165] loop3: detected capacity change from 0 to 40 [ 3177.061256] loop6: detected capacity change from 0 to 40 14:11:59 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3177.083976] FAT-fs (loop6): bogus number of reserved sectors [ 3177.084774] FAT-fs (loop6): Can't find a valid FAT filesystem 14:11:59 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:11:59 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:11:59 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "", ['\x00', '\x00']}, 0x220) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3177.230890] loop5: detected capacity change from 0 to 40 [ 3177.296113] loop0: detected capacity change from 0 to 40 [ 3177.334281] loop2: detected capacity change from 0 to 40 [ 3177.345123] loop4: detected capacity change from 0 to 40 14:12:17 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:17 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:17 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:12:17 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:12:17 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:12:17 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "", ['\x00', '\x00']}, 0x220) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r0, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(0xffffffffffffffff, &(0x7f0000000540)=@known='system.sockprotoname\x00') [ 3194.567732] loop0: detected capacity change from 0 to 40 [ 3194.570832] loop4: detected capacity change from 0 to 40 [ 3194.576319] loop5: detected capacity change from 0 to 40 [ 3194.608831] loop1: detected capacity change from 0 to 40 [ 3194.619547] loop2: detected capacity change from 0 to 40 [ 3194.619672] loop6: detected capacity change from 0 to 40 [ 3194.623643] loop3: detected capacity change from 0 to 40 [ 3194.637385] FAT-fs (loop6): bogus number of reserved sectors [ 3194.638491] FAT-fs (loop6): Can't find a valid FAT filesystem 14:12:17 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3194.754289] bio_check_eod: 5 callbacks suppressed [ 3194.754315] syz-executor.5: attempt to access beyond end of device [ 3194.754315] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3194.756989] buffer_io_error: 5 callbacks suppressed [ 3194.757005] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3194.776161] syz-executor.4: attempt to access beyond end of device [ 3194.776161] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3194.778121] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3194.919058] syz-executor.3: attempt to access beyond end of device [ 3194.919058] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3194.921196] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3194.935155] loop0: detected capacity change from 0 to 40 [ 3194.944987] syz-executor.2: attempt to access beyond end of device [ 3194.944987] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3194.946803] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:12:17 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:12:17 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:12:17 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:17 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3195.258372] loop5: detected capacity change from 0 to 40 [ 3195.281838] loop4: detected capacity change from 0 to 40 14:12:18 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3195.359786] loop2: detected capacity change from 0 to 40 [ 3195.422154] syz-executor.5: attempt to access beyond end of device [ 3195.422154] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3195.423797] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3195.502123] loop3: detected capacity change from 0 to 40 [ 3195.536160] syz-executor.2: attempt to access beyond end of device [ 3195.536160] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3195.538135] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3195.569309] syz-executor.4: attempt to access beyond end of device [ 3195.569309] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3195.571253] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3195.575061] loop0: detected capacity change from 0 to 40 [ 3195.695342] syz-executor.3: attempt to access beyond end of device [ 3195.695342] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3195.697117] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:12:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:34 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:34 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, 0x0, 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:12:34 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:34 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:12:34 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r0, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(0xffffffffffffffff, &(0x7f0000000540)=@known='system.sockprotoname\x00') 14:12:34 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3212.009251] loop1: detected capacity change from 0 to 40 [ 3212.012147] loop5: detected capacity change from 0 to 40 [ 3212.013245] loop3: detected capacity change from 0 to 40 [ 3212.015402] loop6: detected capacity change from 0 to 40 [ 3212.019829] loop4: detected capacity change from 0 to 40 [ 3212.027368] loop0: detected capacity change from 0 to 40 [ 3212.036040] loop2: detected capacity change from 0 to 40 [ 3212.042903] FAT-fs (loop6): bogus number of reserved sectors [ 3212.043718] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3212.244598] syz-executor.5: attempt to access beyond end of device [ 3212.244598] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.246547] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3212.309897] syz-executor.3: attempt to access beyond end of device [ 3212.309897] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.311587] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:12:35 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, 0x0, 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3212.334609] syz-executor.4: attempt to access beyond end of device [ 3212.334609] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.336808] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:12:35 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {0x0}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3212.383054] syz-executor.2: attempt to access beyond end of device [ 3212.383054] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.384862] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3212.450996] loop0: detected capacity change from 0 to 40 14:12:35 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:12:35 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:35 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbf", ['\x00', '\x00']}, 0x26c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3212.621311] loop5: detected capacity change from 0 to 40 [ 3212.679840] loop3: detected capacity change from 0 to 40 [ 3212.723748] loop4: detected capacity change from 0 to 40 14:12:35 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, 0x0, 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3212.768658] loop2: detected capacity change from 0 to 40 [ 3212.912811] syz-executor.5: attempt to access beyond end of device [ 3212.912811] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.913639] loop0: detected capacity change from 0 to 40 [ 3212.914493] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3212.944037] syz-executor.3: attempt to access beyond end of device [ 3212.944037] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.944950] syz-executor.4: attempt to access beyond end of device [ 3212.944950] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3212.945794] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3212.947656] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:12:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r0, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(0xffffffffffffffff, &(0x7f0000000540)=@known='system.sockprotoname\x00') 14:12:35 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3213.007316] syz-executor.2: attempt to access beyond end of device [ 3213.007316] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3213.009187] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:12:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3213.107538] loop1: detected capacity change from 0 to 40 [ 3213.175174] loop6: detected capacity change from 0 to 40 [ 3213.202323] FAT-fs (loop6): bogus number of reserved sectors [ 3213.203630] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3228.372627] loop4: detected capacity change from 0 to 40 [ 3228.375732] loop0: detected capacity change from 0 to 40 14:12:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:51 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:51 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:51 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {0x0}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:12:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:12:51 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:12:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(r0, 0x0) [ 3228.392615] loop5: detected capacity change from 0 to 40 [ 3228.395301] loop3: detected capacity change from 0 to 40 [ 3228.395587] loop2: detected capacity change from 0 to 40 [ 3228.413681] loop1: detected capacity change from 0 to 40 [ 3228.420261] loop6: detected capacity change from 0 to 40 [ 3228.450303] FAT-fs (loop6): bogus number of reserved sectors [ 3228.450856] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3228.462254] syz-executor.0: attempt to access beyond end of device [ 3228.462254] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.463187] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3228.534398] syz-executor.4: attempt to access beyond end of device [ 3228.534398] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.535433] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3228.562000] syz-executor.3: attempt to access beyond end of device [ 3228.562000] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.563187] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3228.569622] syz-executor.5: attempt to access beyond end of device [ 3228.569622] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.570829] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3228.573019] syz-executor.2: attempt to access beyond end of device [ 3228.573019] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.574966] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:12:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:12:51 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3228.660137] loop0: detected capacity change from 0 to 40 14:12:51 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {0x0}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:12:51 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3228.724779] loop4: detected capacity change from 0 to 40 14:12:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3228.757217] syz-executor.0: attempt to access beyond end of device [ 3228.757217] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.758068] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3228.796383] loop5: detected capacity change from 0 to 40 [ 3228.818261] loop2: detected capacity change from 0 to 40 [ 3228.872865] loop3: detected capacity change from 0 to 40 [ 3228.876760] syz-executor.4: attempt to access beyond end of device [ 3228.876760] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.877797] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:12:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3228.942804] loop0: detected capacity change from 0 to 40 [ 3228.955349] syz-executor.5: attempt to access beyond end of device [ 3228.955349] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3228.956355] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:12:51 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3229.002204] syz-executor.0: attempt to access beyond end of device [ 3229.002204] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3229.004052] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3229.023314] syz-executor.2: attempt to access beyond end of device [ 3229.023314] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3229.024692] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:12:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3229.138065] loop4: detected capacity change from 0 to 40 [ 3229.194430] loop0: detected capacity change from 0 to 40 [ 3229.310965] perf: interrupt took too long (21077 > 20970), lowering kernel.perf_event_max_sample_rate to 9000 14:13:06 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:06 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:13:06 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:06 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4", ['\x00', '\x00']}, 0x292) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:06 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(r0, 0x0) 14:13:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:06 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3243.762202] loop1: detected capacity change from 0 to 40 [ 3243.765661] loop2: detected capacity change from 0 to 40 [ 3243.768118] loop6: detected capacity change from 0 to 40 [ 3243.775393] loop4: detected capacity change from 0 to 40 [ 3243.777775] loop3: detected capacity change from 0 to 40 [ 3243.780590] loop0: detected capacity change from 0 to 40 [ 3243.796224] FAT-fs (loop6): bogus number of reserved sectors [ 3243.797131] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3243.814347] loop5: detected capacity change from 0 to 40 [ 3243.929317] bio_check_eod: 3 callbacks suppressed [ 3243.929381] syz-executor.2: attempt to access beyond end of device [ 3243.929381] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3243.932427] buffer_io_error: 3 callbacks suppressed [ 3243.933239] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3244.042796] syz-executor.3: attempt to access beyond end of device [ 3244.042796] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.044808] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3244.049167] syz-executor.4: attempt to access beyond end of device [ 3244.049167] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.050755] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:13:06 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.165299] syz-executor.5: attempt to access beyond end of device [ 3244.165299] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.167569] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:13:06 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.248173] loop2: detected capacity change from 0 to 40 14:13:07 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:13:07 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3244.466288] syz-executor.2: attempt to access beyond end of device [ 3244.466288] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.468252] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3244.488885] loop3: detected capacity change from 0 to 40 [ 3244.521356] loop4: detected capacity change from 0 to 40 [ 3244.536415] syz-executor.0: attempt to access beyond end of device [ 3244.536415] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.539245] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3244.577208] loop5: detected capacity change from 0 to 40 14:13:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc8602, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file2\x00', 0xff, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="52fa7dc293dfccb9032d08433eecaac0feedb5a5da106511d50864833c557249fc9ed317034bba33fbd7c4b9eeeca9d4c4fce5b030b45f24201a091944602bd9dfacebf67ce87ed8e4d80b35754e227242b8b6a48f09bf582cf3635d7187e7405a96b339be90773858ce1f83a524db89fda6beb23004a27b4dc44c5757685303443c2ac4fdefdfab564e08f98499f14d796b27b089fb5f6567690a0395f1b4d8cc6b42036ca93be5e1bf906b02959c28cda149c227dbef459e5d0a60cc5eab353b9df3e558b3fb7920a5dee1fd3d5a8374880a99", 0xd4, 0x3f}], 0x9c, &(0x7f0000000440)={[{@rodir}, {@numtail}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x94, 0x3, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/248, 0xf8) ioctl$FITHAW(r1, 0xc0045878) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x204000, 0x80, 0x19}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x103) creat(&(0x7f0000000040)='./file0\x00', 0x40) fremovexattr(r0, 0x0) 14:13:07 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.709988] syz-executor.3: attempt to access beyond end of device [ 3244.709988] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.711566] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:13:07 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.772689] syz-executor.4: attempt to access beyond end of device [ 3244.772689] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.774853] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:13:07 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.779929] syz-executor.5: attempt to access beyond end of device [ 3244.779929] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.781737] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3244.799090] loop1: detected capacity change from 0 to 40 [ 3244.803859] loop2: detected capacity change from 0 to 40 [ 3244.870905] loop0: detected capacity change from 0 to 40 [ 3244.870923] loop6: detected capacity change from 0 to 40 14:13:07 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3244.911203] FAT-fs (loop6): bogus number of reserved sectors [ 3244.912143] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3244.974651] syz-executor.2: attempt to access beyond end of device [ 3244.974651] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3244.976012] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:13:07 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3245.055901] loop5: detected capacity change from 0 to 40 [ 3245.075084] loop3: detected capacity change from 0 to 40 [ 3263.304837] loop2: detected capacity change from 0 to 40 [ 3263.317587] loop0: detected capacity change from 0 to 40 14:13:26 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:13:26 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e4", ['\x00', '\x00']}, 0x2a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:26 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:26 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b", 0x40}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:13:26 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:26 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:26 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3263.338955] loop4: detected capacity change from 0 to 40 [ 3263.355227] loop1: detected capacity change from 0 to 40 [ 3263.361016] bio_check_eod: 3 callbacks suppressed [ 3263.361028] syz-executor.0: attempt to access beyond end of device [ 3263.361028] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.362210] buffer_io_error: 3 callbacks suppressed [ 3263.362219] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3263.383701] syz-executor.2: attempt to access beyond end of device [ 3263.383701] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.384647] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3263.402064] syz-executor.4: attempt to access beyond end of device [ 3263.402064] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.403078] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:13:26 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3263.412172] loop6: detected capacity change from 0 to 40 [ 3263.416843] FAT-fs (loop6): bogus number of reserved sectors [ 3263.417252] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3263.425313] loop3: detected capacity change from 0 to 40 [ 3263.432197] loop5: detected capacity change from 0 to 40 14:13:26 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:26 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3263.516425] loop0: detected capacity change from 0 to 40 [ 3263.530127] loop2: detected capacity change from 0 to 40 [ 3263.601063] syz-executor.0: attempt to access beyond end of device [ 3263.601063] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.602089] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3263.632712] loop4: detected capacity change from 0 to 40 [ 3263.636158] syz-executor.5: attempt to access beyond end of device [ 3263.636158] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.638276] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3263.669246] syz-executor.3: attempt to access beyond end of device [ 3263.669246] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.670267] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3263.691743] syz-executor.2: attempt to access beyond end of device [ 3263.691743] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.692924] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:13:26 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:26 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b", 0x40}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3263.763113] syz-executor.1: attempt to access beyond end of device [ 3263.763113] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.764306] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3263.818943] syz-executor.4: attempt to access beyond end of device [ 3263.818943] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.819892] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:13:26 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3263.850165] loop5: detected capacity change from 0 to 40 [ 3263.862521] loop0: detected capacity change from 0 to 40 14:13:26 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3263.962990] syz-executor.5: attempt to access beyond end of device [ 3263.962990] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3263.964838] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:13:26 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3264.011905] loop3: detected capacity change from 0 to 40 14:13:26 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3264.085836] loop2: detected capacity change from 0 to 40 14:13:26 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3264.292519] loop4: detected capacity change from 0 to 40 [ 3264.301339] loop1: detected capacity change from 0 to 40 [ 3264.304573] loop3: detected capacity change from 0 to 40 14:13:45 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b", 0x40}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:13:45 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:45 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:13:45 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87", ['\x00', '\x00']}, 0x2af) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:45 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) [ 3282.743098] loop2: detected capacity change from 0 to 40 [ 3282.748170] loop5: detected capacity change from 0 to 40 sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:13:45 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b", 0x40}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:13:45 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {0x0}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3282.764036] loop4: detected capacity change from 0 to 40 [ 3282.764987] loop6: detected capacity change from 0 to 40 [ 3282.766808] loop3: detected capacity change from 0 to 40 [ 3282.771749] loop0: detected capacity change from 0 to 40 [ 3282.772241] FAT-fs (loop6): invalid media value (0x00) [ 3282.773080] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3282.823944] loop1: detected capacity change from 0 to 40 14:13:45 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3282.896810] bio_check_eod: 6 callbacks suppressed [ 3282.896830] syz-executor.2: attempt to access beyond end of device [ 3282.896830] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3282.898673] buffer_io_error: 6 callbacks suppressed [ 3282.898683] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3282.901555] syz-executor.0: attempt to access beyond end of device [ 3282.901555] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3282.902751] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3282.926978] syz-executor.3: attempt to access beyond end of device [ 3282.926978] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3282.928181] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3282.929949] syz-executor.5: attempt to access beyond end of device [ 3282.929949] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3282.931816] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3282.957594] syz-executor.4: attempt to access beyond end of device [ 3282.957594] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3282.958821] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:13:45 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a2", 0x60}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:13:45 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:13:45 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3283.053768] syz-executor.1: attempt to access beyond end of device [ 3283.053768] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3283.054673] Buffer I/O error on dev loop1, logical block 10, lost async page write 14:13:45 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {0x0}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3283.115291] loop5: detected capacity change from 0 to 40 [ 3283.194673] loop3: detected capacity change from 0 to 40 [ 3283.202962] loop2: detected capacity change from 0 to 40 [ 3283.205861] loop0: detected capacity change from 0 to 40 [ 3283.259074] syz-executor.5: attempt to access beyond end of device [ 3283.259074] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3283.260988] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3283.324411] syz-executor.3: attempt to access beyond end of device [ 3283.324411] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3283.326689] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3283.350033] syz-executor.0: attempt to access beyond end of device [ 3283.350033] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3283.352269] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3283.358886] syz-executor.2: attempt to access beyond end of device [ 3283.358886] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3283.360918] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:14:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:03 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:03 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:03 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a2", 0x60}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:03 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:03 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b", 0x40}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:03 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:14:03 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {0x0}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3300.536566] loop3: detected capacity change from 0 to 40 [ 3300.587642] loop1: detected capacity change from 0 to 40 [ 3300.606924] loop4: detected capacity change from 0 to 40 [ 3300.608215] loop6: detected capacity change from 0 to 40 [ 3300.615594] loop0: detected capacity change from 0 to 40 [ 3300.618881] loop2: detected capacity change from 0 to 40 [ 3300.619981] loop5: detected capacity change from 0 to 40 [ 3300.629212] FAT-fs (loop6): invalid media value (0x00) [ 3300.630155] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3300.664868] syz-executor.3: attempt to access beyond end of device [ 3300.664868] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.666565] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:14:03 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3300.811371] syz-executor.1: attempt to access beyond end of device [ 3300.811371] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.812832] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3300.830119] syz-executor.0: attempt to access beyond end of device [ 3300.830119] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.831691] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:14:03 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3300.857189] syz-executor.4: attempt to access beyond end of device [ 3300.857189] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.858927] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3300.860923] syz-executor.5: attempt to access beyond end of device [ 3300.860923] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.862293] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3300.881017] syz-executor.2: attempt to access beyond end of device [ 3300.881017] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3300.882242] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:14:03 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:03 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {0x0}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:03 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880", ['\x00', '\x00']}, 0x2b4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3301.047134] loop3: detected capacity change from 0 to 40 14:14:03 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:14:03 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a2", 0x60}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3301.139021] loop2: detected capacity change from 0 to 40 [ 3301.144920] loop1: detected capacity change from 0 to 40 [ 3301.157881] loop0: detected capacity change from 0 to 40 [ 3301.164255] loop4: detected capacity change from 0 to 40 [ 3301.203104] loop5: detected capacity change from 0 to 40 [ 3301.213715] syz-executor.3: attempt to access beyond end of device [ 3301.213715] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3301.214815] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3301.256127] syz-executor.1: attempt to access beyond end of device [ 3301.256127] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3301.257195] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3301.326331] syz-executor.2: attempt to access beyond end of device [ 3301.326331] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3301.327381] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3301.330908] syz-executor.5: attempt to access beyond end of device [ 3301.330908] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3301.331817] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:14:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:18 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:18 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9", 0x70}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:18 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:18 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {0x0}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:18 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:18 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:14:18 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3315.775574] loop0: detected capacity change from 0 to 40 [ 3315.782268] loop5: detected capacity change from 0 to 40 [ 3315.782855] loop1: detected capacity change from 0 to 40 [ 3315.794049] loop6: detected capacity change from 0 to 40 [ 3315.802826] FAT-fs (loop6): invalid media value (0x00) [ 3315.803224] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3315.814553] loop2: detected capacity change from 0 to 40 [ 3315.816961] loop4: detected capacity change from 0 to 40 [ 3315.820696] loop3: detected capacity change from 0 to 40 [ 3315.884014] bio_check_eod: 2 callbacks suppressed [ 3315.884031] syz-executor.0: attempt to access beyond end of device [ 3315.884031] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3315.885359] buffer_io_error: 2 callbacks suppressed [ 3315.885367] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3315.912302] syz-executor.1: attempt to access beyond end of device [ 3315.912302] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3315.913268] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3315.923280] syz-executor.2: attempt to access beyond end of device [ 3315.923280] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3315.924240] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:14:18 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3316.020701] syz-executor.3: attempt to access beyond end of device [ 3316.020701] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.021691] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:14:18 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3316.038230] syz-executor.4: attempt to access beyond end of device [ 3316.038230] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.040151] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3316.051119] syz-executor.5: attempt to access beyond end of device [ 3316.051119] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.052951] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:14:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:18 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3316.134870] loop0: detected capacity change from 0 to 40 14:14:18 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3316.221835] syz-executor.0: attempt to access beyond end of device [ 3316.221835] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.224013] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3316.263942] loop1: detected capacity change from 0 to 40 14:14:19 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9", 0x70}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3316.282046] loop2: detected capacity change from 0 to 40 [ 3316.284574] FAT-fs (loop1): invalid media value (0x00) [ 3316.285718] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:19 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:19 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3316.386835] loop3: detected capacity change from 0 to 40 [ 3316.393829] loop4: detected capacity change from 0 to 40 [ 3316.427326] loop5: detected capacity change from 0 to 40 [ 3316.549216] syz-executor.2: attempt to access beyond end of device [ 3316.549216] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.550671] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3316.554720] syz-executor.3: attempt to access beyond end of device [ 3316.554720] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.556078] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3316.593662] syz-executor.4: attempt to access beyond end of device [ 3316.593662] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3316.594859] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:14:34 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bb", 0x7b}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:34 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:34 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:14:34 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9", 0x70}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:34 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3332.165881] loop4: detected capacity change from 0 to 40 [ 3332.168781] loop5: detected capacity change from 0 to 40 [ 3332.175387] loop0: detected capacity change from 0 to 40 [ 3332.177704] loop1: detected capacity change from 0 to 40 14:14:34 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9", 0x70}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:34 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b5", ['\x00', '\x00']}, 0x2b6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3332.224288] loop6: detected capacity change from 0 to 40 [ 3332.226730] loop3: detected capacity change from 0 to 40 [ 3332.230788] loop2: detected capacity change from 0 to 40 [ 3332.262763] FAT-fs (loop6): invalid media value (0x00) [ 3332.263865] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3332.271289] bio_check_eod: 1 callbacks suppressed [ 3332.271308] syz-executor.0: attempt to access beyond end of device [ 3332.271308] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.273690] buffer_io_error: 1 callbacks suppressed [ 3332.273706] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3332.278866] syz-executor.4: attempt to access beyond end of device [ 3332.278866] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.279782] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:14:35 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3332.396808] syz-executor.1: attempt to access beyond end of device [ 3332.396808] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.397846] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3332.425869] syz-executor.3: attempt to access beyond end of device [ 3332.425869] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.426760] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3332.453043] syz-executor.5: attempt to access beyond end of device [ 3332.453043] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.455038] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:14:35 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bb", 0x7b}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3332.541943] syz-executor.2: attempt to access beyond end of device [ 3332.541943] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.543695] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:14:35 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de76", 0x78}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:35 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3332.595728] loop4: detected capacity change from 0 to 40 [ 3332.652953] loop0: detected capacity change from 0 to 40 [ 3332.654566] loop3: detected capacity change from 0 to 40 14:14:35 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9", 0x70}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:35 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3332.846220] loop5: detected capacity change from 0 to 40 [ 3332.849139] syz-executor.3: attempt to access beyond end of device [ 3332.849139] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.851128] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3332.892264] syz-executor.0: attempt to access beyond end of device [ 3332.892264] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.894051] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3332.910377] syz-executor.4: attempt to access beyond end of device [ 3332.910377] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.912624] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3332.953531] loop1: detected capacity change from 0 to 40 [ 3332.986006] syz-executor.5: attempt to access beyond end of device [ 3332.986006] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.986951] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:14:35 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3333.044555] loop2: detected capacity change from 0 to 40 14:14:50 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:50 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bb", 0x7b}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:50 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:50 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de76", 0x78}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:14:50 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3347.513410] loop1: detected capacity change from 0 to 40 [ 3347.518037] loop6: detected capacity change from 0 to 40 14:14:50 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3347.521756] loop5: detected capacity change from 0 to 40 [ 3347.523741] loop4: detected capacity change from 0 to 40 [ 3347.527558] FAT-fs (loop6): invalid media value (0x00) [ 3347.527982] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3347.533800] loop3: detected capacity change from 0 to 40 [ 3347.536142] loop0: detected capacity change from 0 to 40 [ 3347.549053] loop2: detected capacity change from 0 to 40 [ 3347.551492] FAT-fs (loop1): invalid media value (0x00) [ 3347.552210] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3347.653239] bio_check_eod: 2 callbacks suppressed [ 3347.653266] syz-executor.0: attempt to access beyond end of device [ 3347.653266] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.655897] buffer_io_error: 2 callbacks suppressed [ 3347.655913] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3347.694962] syz-executor.4: attempt to access beyond end of device [ 3347.694962] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.695916] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3347.697398] syz-executor.5: attempt to access beyond end of device [ 3347.697398] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.698422] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3347.719267] syz-executor.3: attempt to access beyond end of device [ 3347.719267] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.720234] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3347.747727] syz-executor.2: attempt to access beyond end of device [ 3347.747727] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.748794] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:14:50 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:14:50 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de76", 0x78}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3347.858618] loop0: detected capacity change from 0 to 40 14:14:50 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:14:50 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434", 0xb8}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:50 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506", ['\x00', '\x00']}, 0x2b7) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3347.918110] syz-executor.0: attempt to access beyond end of device [ 3347.918110] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.920120] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3348.013911] loop4: detected capacity change from 0 to 40 [ 3348.017669] loop3: detected capacity change from 0 to 40 [ 3348.018604] loop5: detected capacity change from 0 to 40 [ 3348.064578] loop2: detected capacity change from 0 to 40 14:14:50 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3348.172306] loop0: detected capacity change from 0 to 40 [ 3348.190202] syz-executor.2: attempt to access beyond end of device [ 3348.190202] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3348.192064] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3348.202661] syz-executor.5: attempt to access beyond end of device [ 3348.202661] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3348.203635] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3348.217299] syz-executor.4: attempt to access beyond end of device [ 3348.217299] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3348.218345] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3348.222034] syz-executor.3: attempt to access beyond end of device [ 3348.222034] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3348.223172] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:14:51 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434", 0xb8}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:14:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3348.390000] loop3: detected capacity change from 0 to 40 14:14:51 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f70045", 0x7c}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3348.417641] loop2: detected capacity change from 0 to 40 [ 3348.510944] loop5: detected capacity change from 0 to 40 14:15:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:07 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:07 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:07 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:07 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434", 0xb8}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:07 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:07 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f70045", 0x7c}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:15:07 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3365.095552] loop4: detected capacity change from 0 to 40 [ 3365.127234] loop1: detected capacity change from 0 to 40 [ 3365.130334] loop0: detected capacity change from 0 to 40 [ 3365.173403] loop6: detected capacity change from 0 to 40 [ 3365.182633] loop3: detected capacity change from 0 to 40 [ 3365.185343] loop2: detected capacity change from 0 to 40 [ 3365.187238] bio_check_eod: 4 callbacks suppressed [ 3365.187264] syz-executor.4: attempt to access beyond end of device [ 3365.187264] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.188660] buffer_io_error: 4 callbacks suppressed [ 3365.188670] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3365.188731] loop5: detected capacity change from 0 to 40 [ 3365.199684] FAT-fs (loop6): invalid media value (0x00) [ 3365.200540] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3365.229782] syz-executor.1: attempt to access beyond end of device [ 3365.229782] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.230834] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3365.234131] syz-executor.0: attempt to access beyond end of device [ 3365.234131] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.235076] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:15:08 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:15:08 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3365.351373] loop4: detected capacity change from 0 to 40 14:15:08 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3365.398981] syz-executor.3: attempt to access beyond end of device [ 3365.398981] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.400850] loop1: detected capacity change from 0 to 40 [ 3365.401389] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3365.436933] syz-executor.5: attempt to access beyond end of device [ 3365.436933] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.438739] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3365.448261] loop0: detected capacity change from 0 to 40 [ 3365.464415] syz-executor.2: attempt to access beyond end of device [ 3365.464415] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.466618] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3365.543173] syz-executor.1: attempt to access beyond end of device [ 3365.543173] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.545201] Buffer I/O error on dev loop1, logical block 10, lost async page write 14:15:08 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:08 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207", 0xd7}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3365.617761] syz-executor.4: attempt to access beyond end of device [ 3365.617761] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.619616] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3365.730317] loop2: detected capacity change from 0 to 40 [ 3365.780961] loop3: detected capacity change from 0 to 40 [ 3365.894932] syz-executor.2: attempt to access beyond end of device [ 3365.894932] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.896779] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3365.914378] syz-executor.3: attempt to access beyond end of device [ 3365.914378] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3365.915519] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:15:24 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f70045", 0x7c}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:15:24 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207", 0xd7}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:24 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:24 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3381.347883] loop4: detected capacity change from 0 to 40 14:15:24 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207", 0xd7}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:24 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:24 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3381.352191] loop0: detected capacity change from 0 to 40 [ 3381.396152] loop1: detected capacity change from 0 to 40 [ 3381.396557] loop2: detected capacity change from 0 to 40 [ 3381.417828] loop6: detected capacity change from 0 to 40 [ 3381.429417] syz-executor.4: attempt to access beyond end of device [ 3381.429417] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.430367] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3381.439782] loop3: detected capacity change from 0 to 40 [ 3381.440731] FAT-fs (loop6): bogus number of FAT sectors [ 3381.441642] FAT-fs (loop6): Can't find a valid FAT filesystem 14:15:24 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3381.458194] loop5: detected capacity change from 0 to 40 [ 3381.508403] syz-executor.2: attempt to access beyond end of device [ 3381.508403] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.509347] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:15:24 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3381.578982] loop0: detected capacity change from 0 to 40 [ 3381.590827] loop4: detected capacity change from 0 to 40 14:15:24 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3381.616394] syz-executor.5: attempt to access beyond end of device [ 3381.616394] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.617563] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3381.686653] syz-executor.4: attempt to access beyond end of device [ 3381.686653] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.687751] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3381.693350] syz-executor.3: attempt to access beyond end of device [ 3381.693350] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.695348] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3381.706100] syz-executor.1: attempt to access beyond end of device [ 3381.706100] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.708144] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3381.734877] loop2: detected capacity change from 0 to 40 14:15:24 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a83", 0x7e}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3381.787045] loop5: detected capacity change from 0 to 40 14:15:24 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3381.868381] syz-executor.5: attempt to access beyond end of device [ 3381.868381] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.869311] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:15:24 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:24 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a83", 0x7e}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:15:24 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207", 0xd7}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3381.977365] loop4: detected capacity change from 0 to 40 [ 3382.016418] syz-executor.2: attempt to access beyond end of device [ 3382.016418] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3382.017603] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:15:24 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207", 0xd7}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3382.062375] loop0: detected capacity change from 0 to 40 [ 3382.126215] syz-executor.4: attempt to access beyond end of device [ 3382.126215] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3382.127182] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3382.166880] loop5: detected capacity change from 0 to 40 [ 3382.174586] loop3: detected capacity change from 0 to 40 14:15:24 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00']}, 0x1b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3382.236297] loop1: detected capacity change from 0 to 40 [ 3382.276072] loop2: detected capacity change from 0 to 40 [ 3382.302059] syz-executor.1: attempt to access beyond end of device [ 3382.302059] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3382.303004] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3399.309797] loop6: detected capacity change from 0 to 40 [ 3399.314620] loop4: detected capacity change from 0 to 40 14:15:42 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a83", 0x7e}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:15:42 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:15:42 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:42 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3399.320717] FAT-fs (loop6): bogus number of FAT sectors [ 3399.321082] FAT-fs (loop6): Can't find a valid FAT filesystem 14:15:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:42 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe1", 0xe6}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3399.337729] loop2: detected capacity change from 0 to 40 [ 3399.355404] loop1: detected capacity change from 0 to 40 [ 3399.357000] loop5: detected capacity change from 0 to 40 [ 3399.361205] FAT-fs (loop1): bogus number of FAT sectors [ 3399.361906] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3399.410302] loop0: detected capacity change from 0 to 40 [ 3399.412235] loop3: detected capacity change from 0 to 40 [ 3399.423336] bio_check_eod: 3 callbacks suppressed [ 3399.423347] syz-executor.4: attempt to access beyond end of device [ 3399.423347] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.425001] buffer_io_error: 3 callbacks suppressed [ 3399.425011] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3399.477335] syz-executor.2: attempt to access beyond end of device [ 3399.477335] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.478636] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3399.511659] syz-executor.5: attempt to access beyond end of device [ 3399.511659] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.512962] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3399.522110] syz-executor.3: attempt to access beyond end of device [ 3399.522110] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.523195] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:15:42 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:15:42 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:42 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:42 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b", 0x7f}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:15:42 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe1", 0xe6}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3399.715636] loop4: detected capacity change from 0 to 40 [ 3399.721805] loop0: detected capacity change from 0 to 40 [ 3399.750104] loop2: detected capacity change from 0 to 40 [ 3399.786380] loop3: detected capacity change from 0 to 40 [ 3399.799025] loop5: detected capacity change from 0 to 40 14:15:42 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3399.901840] syz-executor.4: attempt to access beyond end of device [ 3399.901840] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.904203] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3399.986870] syz-executor.2: attempt to access beyond end of device [ 3399.986870] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3399.988995] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3399.995799] loop0: detected capacity change from 0 to 40 14:15:42 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3400.050225] syz-executor.3: attempt to access beyond end of device [ 3400.050225] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3400.051359] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:15:42 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3400.157896] syz-executor.5: attempt to access beyond end of device [ 3400.157896] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3400.160092] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3400.199313] loop0: detected capacity change from 0 to 40 [ 3400.200312] loop4: detected capacity change from 0 to 40 [ 3400.385917] syz-executor.4: attempt to access beyond end of device [ 3400.385917] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3400.387172] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:15:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:58 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe1", 0xe6}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:58 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:15:58 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:15:58 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:58 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:15:58 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b", 0x7f}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3415.939408] loop3: detected capacity change from 0 to 40 [ 3415.969188] loop1: detected capacity change from 0 to 40 [ 3415.973559] loop4: detected capacity change from 0 to 40 [ 3415.974689] loop6: detected capacity change from 0 to 40 14:15:58 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3415.983512] FAT-fs (loop6): bogus number of FAT sectors [ 3415.984086] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3415.990699] loop5: detected capacity change from 0 to 40 [ 3416.004532] loop0: detected capacity change from 0 to 40 [ 3416.031728] loop2: detected capacity change from 0 to 40 [ 3416.124921] syz-executor.4: attempt to access beyond end of device [ 3416.124921] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.126819] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3416.132812] syz-executor.3: attempt to access beyond end of device [ 3416.132812] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.134600] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3416.162068] syz-executor.5: attempt to access beyond end of device [ 3416.162068] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.163424] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:15:58 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3416.253295] loop0: detected capacity change from 0 to 40 14:15:59 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3416.313086] syz-executor.2: attempt to access beyond end of device [ 3416.313086] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.314966] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:15:59 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3416.437380] loop3: detected capacity change from 0 to 40 14:15:59 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b", 0x7f}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3416.461262] syz-executor.0: attempt to access beyond end of device [ 3416.461262] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.462313] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:15:59 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3416.577367] loop4: detected capacity change from 0 to 40 [ 3416.579328] loop5: detected capacity change from 0 to 40 [ 3416.619157] loop2: detected capacity change from 0 to 40 14:15:59 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3416.734864] syz-executor.3: attempt to access beyond end of device [ 3416.734864] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.736678] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3416.796700] syz-executor.5: attempt to access beyond end of device [ 3416.796700] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.798154] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3416.811651] loop0: detected capacity change from 0 to 40 [ 3416.850731] syz-executor.2: attempt to access beyond end of device [ 3416.850731] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.852280] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3416.861319] syz-executor.4: attempt to access beyond end of device [ 3416.861319] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.862711] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3416.956200] syz-executor.0: attempt to access beyond end of device [ 3416.956200] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3416.957943] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:16:14 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:14 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:14 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:14 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:16:14 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3431.801078] loop6: detected capacity change from 0 to 40 14:16:14 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:16:14 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3431.833042] loop0: detected capacity change from 0 to 40 [ 3431.834224] loop1: detected capacity change from 0 to 40 [ 3431.844591] loop4: detected capacity change from 0 to 40 [ 3431.849257] loop3: detected capacity change from 0 to 40 [ 3431.863964] loop5: detected capacity change from 0 to 40 [ 3431.879085] loop2: detected capacity change from 0 to 40 [ 3431.971000] syz-executor.0: attempt to access beyond end of device [ 3431.971000] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3431.972039] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3431.976739] syz-executor.3: attempt to access beyond end of device [ 3431.976739] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3431.977685] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3432.004421] syz-executor.5: attempt to access beyond end of device [ 3432.004421] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.005763] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:16:14 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:16:14 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.082101] syz-executor.1: attempt to access beyond end of device [ 3432.082101] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.083916] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3432.110002] syz-executor.4: attempt to access beyond end of device [ 3432.110002] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.111861] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3432.131751] loop3: detected capacity change from 0 to 40 14:16:14 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 3432.141210] loop0: detected capacity change from 0 to 40 [ 3432.201984] syz-executor.2: attempt to access beyond end of device [ 3432.201984] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.203890] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3432.260762] syz-executor.3: attempt to access beyond end of device [ 3432.260762] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.261826] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:16:15 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.325260] syz-executor.0: attempt to access beyond end of device [ 3432.325260] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.325957] loop5: detected capacity change from 0 to 40 [ 3432.327041] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:16:15 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648eb", 0xee}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.341976] loop3: detected capacity change from 0 to 40 14:16:15 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3432.429990] syz-executor.3: attempt to access beyond end of device [ 3432.429990] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.431201] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3432.446935] syz-executor.5: attempt to access beyond end of device [ 3432.446935] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3432.447922] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3432.454053] loop1: detected capacity change from 0 to 40 14:16:15 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:15 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.519950] loop4: detected capacity change from 0 to 40 [ 3432.582354] loop3: detected capacity change from 0 to 40 [ 3432.607041] loop2: detected capacity change from 0 to 40 14:16:15 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:15 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:16:15 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca", 0xf2}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:15 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.847224] loop5: detected capacity change from 0 to 40 [ 3432.849064] loop0: detected capacity change from 0 to 40 14:16:15 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3432.884368] loop2: detected capacity change from 0 to 40 [ 3432.886297] loop3: detected capacity change from 0 to 40 [ 3432.896137] loop6: detected capacity change from 0 to 40 14:16:32 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:32 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:32 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:32 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {0x0}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:32 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') [ 3450.101975] loop0: detected capacity change from 0 to 40 [ 3450.104217] loop4: detected capacity change from 0 to 40 [ 3450.107758] loop2: detected capacity change from 0 to 40 [ 3450.111707] loop1: detected capacity change from 0 to 40 r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:16:32 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3450.123197] loop3: detected capacity change from 0 to 40 [ 3450.135741] loop5: detected capacity change from 0 to 40 [ 3450.153041] loop6: detected capacity change from 0 to 40 [ 3450.265893] bio_check_eod: 8 callbacks suppressed [ 3450.265918] syz-executor.0: attempt to access beyond end of device [ 3450.265918] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.268687] buffer_io_error: 8 callbacks suppressed [ 3450.268705] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3450.273280] syz-executor.5: attempt to access beyond end of device [ 3450.273280] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.274199] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3450.277873] syz-executor.4: attempt to access beyond end of device [ 3450.277873] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.280119] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3450.296380] syz-executor.2: attempt to access beyond end of device [ 3450.296380] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.297569] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:16:33 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {0x0}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:33 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3450.424965] syz-executor.3: attempt to access beyond end of device [ 3450.424965] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.427294] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3450.458082] loop2: detected capacity change from 0 to 40 [ 3450.488681] loop5: detected capacity change from 0 to 40 14:16:33 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3450.524898] syz-executor.2: attempt to access beyond end of device [ 3450.524898] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.525995] Buffer I/O error on dev loop2, logical block 10, lost async page write 14:16:33 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3450.599930] loop3: detected capacity change from 0 to 40 [ 3450.662979] syz-executor.5: attempt to access beyond end of device [ 3450.662979] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.663955] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3450.714322] loop4: detected capacity change from 0 to 40 [ 3450.829634] syz-executor.3: attempt to access beyond end of device [ 3450.829634] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.830730] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3450.870134] syz-executor.4: attempt to access beyond end of device [ 3450.870134] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3450.871226] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:16:51 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {0x0}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:16:51 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:51 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) 14:16:51 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a", 0xf4}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:51 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3468.678080] loop5: detected capacity change from 0 to 40 [ 3468.678377] loop4: detected capacity change from 0 to 40 [ 3468.681894] loop1: detected capacity change from 0 to 40 [ 3468.682190] loop3: detected capacity change from 0 to 40 [ 3468.686501] loop0: detected capacity change from 0 to 40 [ 3468.688289] loop2: detected capacity change from 0 to 40 [ 3468.692171] loop6: detected capacity change from 0 to 40 [ 3468.868313] syz-executor.2: attempt to access beyond end of device [ 3468.868313] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3468.870405] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3468.940095] syz-executor.1: attempt to access beyond end of device [ 3468.940095] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3468.941979] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3468.967796] syz-executor.4: attempt to access beyond end of device [ 3468.967796] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3468.969439] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3468.971399] syz-executor.0: attempt to access beyond end of device [ 3468.971399] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3468.973612] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3468.986172] syz-executor.5: attempt to access beyond end of device [ 3468.986172] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3468.988112] Buffer I/O error on dev loop5, logical block 10, lost async page write 14:16:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3469.001953] syz-executor.3: attempt to access beyond end of device [ 3469.001953] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3469.003858] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:16:51 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 14:16:51 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) [ 3469.244772] loop2: detected capacity change from 0 to 40 14:16:52 executing program 3: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)="c12d5b0bf180d512f7b440b27375f3a74f3616724c39dd32d1e9fe5c6cda5c056a62fdc9ecbcd89b7561135f48f84b076a14ad8066a7a61874576b13577ab91209a95682950fd581f9957cf548840c72a6d56414f2cdf6e3b56c5d970154d26e6f461644f6b3d1b9", 0x68}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x3}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:52 executing program 5: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind(r3, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="4ba0221227488fc9fb2ccc2392995ba8fca7137fce983fe4336fb9c08804fa1cba679a659bfa2018d3eb3ffc613313a27d2f9f0bcc568f297813757ba839c97b065b1dfc281fd4a904dc2c8e39a9a9211cbc9457fe0477ef2c1868a4fe3a473ad7dbcbed28edc99336cfb81560c6790e2944995998aa12e317a5eb8c5b069e2690463dd9c1a9", 0x86}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="001e2950c9f2e6a172393df83fc9dd8c43daaa2e8c6e66b822005b91dbbad3849e779a89a848d20dff614e8c4e5c88641c78bb5784e1cc64f83fe3f34cc2069b8c89b5e5c44a8984a95e1f0a528ec768695b745c183d1522393bc741e37420a24e33899e80768c28a1c77e72d93951d9edcdd1606a25de7686f700455a830b1e", 0x80}, {&(0x7f00000007c0)="54a2be7f27ce749478eacf8e9eb0282e950282911857d43cd86a79194c1a8a0e177dc15f5df19b93d2113f8dd72da88b5694b0b737dd59ceca9097e16df9d84ba6af390678461aea3b4b6c05b09b152817039d3252a5c6caa71c3cb6fae9dbdf6a6548ba66d5d39af02acda6852d744bcd01dd4fd451f4a966e7bbd0039b046864bf6c9ff7361353ea75cb1be7facec2edffd18f7fc9c50879c409158ad6c05a69f2f1c114f8e0bdb6fd6dbfdc162f0e47259f60c5920434906dbf1b88dcf98b076c98fc29fd39de93c4ba7bd481f20a88e0e687918207fa2b63429b655dbbb5b15d0f311fe129c212e1068648ebddfd85ca4c9a1e", 0xf5}], 0x4}, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:16:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3469.409889] loop0: detected capacity change from 0 to 40 [ 3469.445273] loop5: detected capacity change from 0 to 40 [ 3469.472292] loop4: detected capacity change from 0 to 40 [ 3469.479792] loop1: detected capacity change from 0 to 40 [ 3469.513108] syz-executor.2: attempt to access beyond end of device [ 3469.513108] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3469.515098] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3469.518191] loop3: detected capacity change from 0 to 40 [ 3469.593373] syz-executor.0: attempt to access beyond end of device [ 3469.593373] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3469.595654] Buffer I/O error on dev loop0, logical block 10, lost async page write 14:16:52 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$inet(r4, 0x0, 0x44808) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:16:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(0xffffffffffffffff, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3469.722917] syz-executor.5: attempt to access beyond end of device [ 3469.722917] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3469.725030] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3469.736919] syz-executor.4: attempt to access beyond end of device [ 3469.736919] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3469.738366] Buffer I/O error on dev loop4, logical block 10, lost async page write 14:16:52 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 3469.814543] loop6: detected capacity change from 0 to 40 [ 3469.833568] loop2: detected capacity change from 0 to 40 14:16:52 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000300)='./file2\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)={{0xcc, 0x5, 0x5, 0xdd, 0x24c, 0x7ca, 0x1dc}, "4153ea8be896e502f55e270ce86a0dc9bd8e0fce0dad337feb82e33b59e65a9313390bf613013544e2a79f587bef4b2c6529f274b28816b826948d55912e6e5d0b93d9e8f68804b3ad151bbfdc6ff29988d70111c487529215ae55201124c09b2c47f2022d1184c443bf3e438916fb8a26c4a8c4599e379a2a91181d3ccbf91279978975e40645ad7e748c02edee87a648308880f9b506cf", ['\x00', '\x00']}, 0x2b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind(r4, &(0x7f0000001e00)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r0, 0x0, 0xfffffdef) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 3470.027815] loop0: detected capacity change from 0 to 40 [ 3471.638584] ================================================================== [ 3471.639325] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 3471.639958] Read of size 8 at addr ffff888016846278 by task syz-executor/15058 [ 3471.640639] [ 3471.640812] CPU: 1 PID: 15058 Comm: syz-executor Not tainted 6.1.0-rc5-next-20221115 #1 [ 3471.641567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3471.642346] Call Trace: [ 3471.642605] [ 3471.642825] dump_stack_lvl+0x8f/0xb7 [ 3471.643209] print_report+0x175/0x478 [ 3471.643590] ? __lock_acquire+0x42c9/0x5e70 [ 3471.644017] kasan_report+0xbf/0x1c0 [ 3471.644386] ? __lock_acquire+0x42c9/0x5e70 [ 3471.644813] __lock_acquire+0x42c9/0x5e70 [ 3471.645226] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3471.645679] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 3471.646168] ? __pfx___lock_acquire+0x10/0x10 [ 3471.646609] ? __switch_to+0x5c3/0xf30 [ 3471.647014] lock_acquire+0x1a6/0x530 [ 3471.647389] ? kmemleak_scan+0x1a0/0x1600 [ 3471.647796] ? __pfx_lock_acquire+0x10/0x10 [ 3471.648217] ? rcu_read_lock_sched_held+0x42/0x80 [ 3471.648699] ? trace_rcu_dyntick+0x1a7/0x250 [ 3471.649136] ? ct_nmi_exit+0x11d/0x1c0 [ 3471.649516] _raw_spin_lock_irq+0x36/0x50 [ 3471.650624] ? kmemleak_scan+0x1a0/0x1600 [ 3471.651891] kmemleak_scan+0x1a0/0x1600 [ 3471.653419] ? __pfx_kmemleak_scan+0x10/0x10 [ 3471.654662] ? strncpy_from_user+0x107/0x500 [ 3471.655761] kmemleak_write+0x574/0x680 [ 3471.656141] ? __pfx_kmemleak_write+0x10/0x10 [ 3471.656571] ? debugfs_file_get+0x1d2/0x450 [ 3471.656980] ? __pfx_debugfs_file_get+0x10/0x10 [ 3471.657417] full_proxy_write+0x121/0x190 [ 3471.657809] vfs_write+0x358/0xe40 [ 3471.658158] ? __pfx_full_proxy_write+0x10/0x10 [ 3471.658602] ? __pfx_vfs_write+0x10/0x10 [ 3471.659013] ? lock_release+0x3b6/0x750 [ 3471.659392] ? syscall_enter_from_user_mode+0x1c/0x50 [ 3471.659886] ? perf_trace_preemptirq_template+0xa6/0x420 [ 3471.660394] ? __fget_light+0x212/0x280 [ 3471.660782] ksys_write+0x12b/0x260 [ 3471.661136] ? __pfx_ksys_write+0x10/0x10 [ 3471.661531] ? syscall_enter_from_user_mode+0x21/0x50 [ 3471.662024] ? syscall_enter_from_user_mode+0x21/0x50 [ 3471.662520] do_syscall_64+0x3f/0x90 [ 3471.662873] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3471.663377] RIP: 0033:0x7f3ede9a35c3 [ 3471.663722] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 3471.665348] RSP: 002b:00007ffedfcea5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3471.666032] RAX: ffffffffffffffda RBX: 00007ffedfceac28 RCX: 00007f3ede9a35c3 [ 3471.666676] RDX: 0000000000000004 RSI: 00007f3edea59ed9 RDI: 0000000000000003 [ 3471.667325] RBP: 0000000000000002 R08: 0000000000000d8e R09: 00007ffedfd17080 [ 3471.667964] R10: 00007ffedfd17090 R11: 0000000000000246 R12: 00000000fffffff6 [ 3471.668614] R13: 00007ffedfcebef1 R14: 0000000000000000 R15: 000000000034f564 [ 3471.669268] [ 3471.669488] [ 3471.669658] Allocated by task 15026: [ 3471.669999] kasan_save_stack+0x22/0x50 [ 3471.670385] kasan_set_track+0x25/0x30 [ 3471.670764] __kasan_slab_alloc+0x5c/0x70 [ 3471.671163] kmem_cache_alloc+0x1e0/0x410 [ 3471.671557] __create_object+0x3d/0xc00 [ 3471.671923] __kmem_cache_alloc_node+0x257/0x400 [ 3471.672366] __kmalloc_node_track_caller+0x43/0xb0 [ 3471.672833] kmemdup+0x2c/0x60 [ 3471.673149] shmem_symlink+0x184/0x690 [ 3471.673517] vfs_symlink+0x368/0x5c0 [ 3471.673877] do_symlinkat+0x133/0x280 [ 3471.674234] __x64_sys_symlink+0x79/0xa0 [ 3471.674613] do_syscall_64+0x3f/0x90 [ 3471.674970] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3471.675449] [ 3471.675612] Freed by task 15061: [ 3471.675924] kasan_save_stack+0x22/0x50 [ 3471.676297] kasan_set_track+0x25/0x30 [ 3471.676673] kasan_save_free_info+0x2e/0x50 [ 3471.677074] __kasan_slab_free+0x10a/0x190 [ 3471.677458] kmem_cache_free+0xfb/0x610 [ 3471.677831] rcu_core+0x7e2/0x2090 [ 3471.678171] __do_softirq+0x1c7/0x8f9 [ 3471.678531] [ 3471.678694] Last potentially related work creation: [ 3471.679148] kasan_save_stack+0x22/0x50 [ 3471.679526] __kasan_record_aux_stack+0x95/0xb0 [ 3471.679956] __call_rcu_common.constprop.0+0x6a/0xa40 [ 3471.680433] __kmem_cache_free+0x95/0x410 [ 3471.680826] shmem_free_in_core_inode+0x8f/0xb0 [ 3471.681252] i_callback+0x46/0x70 [ 3471.681589] rcu_core+0x7e2/0x2090 [ 3471.681933] __do_softirq+0x1c7/0x8f9 [ 3471.682293] [ 3471.682454] Second to last potentially related work creation: [ 3471.682974] kasan_save_stack+0x22/0x50 [ 3471.683355] __kasan_record_aux_stack+0x95/0xb0 [ 3471.683789] __call_rcu_common.constprop.0+0x6a/0xa40 [ 3471.684267] kmem_cache_free+0xc1/0x610 [ 3471.684638] security_file_free+0xae/0xe0 [ 3471.685034] __fput+0x3db/0xa40 [ 3471.685352] task_work_run+0x174/0x280 [ 3471.685712] exit_to_user_mode_prepare+0x199/0x1a0 [ 3471.686176] syscall_exit_to_user_mode+0x1d/0x50 [ 3471.686623] do_syscall_64+0x4c/0x90 [ 3471.686977] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3471.687456] [ 3471.687620] The buggy address belongs to the object at ffff888016846260 [ 3471.687620] which belongs to the cache kmemleak_object of size 240 [ 3471.688746] The buggy address is located 24 bytes inside of [ 3471.688746] 240-byte region [ffff888016846260, ffff888016846350) [ 3471.689769] [ 3471.689932] The buggy address belongs to the physical page: [ 3471.690428] page:00000000a278fe60 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16846 [ 3471.691274] flags: 0x100000000000200(slab|node=0|zone=1) [ 3471.691772] raw: 0100000000000200 ffff88800844f780 ffffea0000256c40 dead000000000002 [ 3471.692463] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 3471.693142] page dumped because: kasan: bad access detected [ 3471.693648] [ 3471.693816] Memory state around the buggy address: [ 3471.694256] ffff888016846100: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 3471.694939] ffff888016846180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3471.695623] >ffff888016846200: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 3471.696278] ^ [ 3471.696936] ffff888016846280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3471.697588] ffff888016846300: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 3471.698250] ================================================================== [ 3471.698889] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 14:16:54 Registers: info registers vcpu 0 RAX=ffffffff843fbab0 RBX=ffffffff85432940 RCX=ffffffff843dc4b2 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20 R8 =0000000000000001 R9 =ffff88806ce34cc3 R10=ffffed100d9c6998 R11=0000000000000001 R12=fffffbfff0a86528 R13=ffffffff85d0f550 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff843fbabf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3fb9d40000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3fb9d3e000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f9aa35e6a8 CR3=000000000e6b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff00000003000055f9aa34dc10 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=323d44455a494c414954494e495f4345 XMM05=3d5145534b534944006b7369643d4550 XMM06=3d454d414e56454400303d444955555f XMM07=59534255530035706f6f6c2f6b636f6c XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824780e5 RDI=ffffffff87dc29e0 RBP=ffffffff87dc29a0 RSP=ffff888042c1f248 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87dc29a0 R14=0000000000000010 R15=ffffffff824780d0 RIP=ffffffff8247813d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555709b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe1707a2b000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe1707a29000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffb6481000 CR3=00000000414e6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff000000000000 XMM02=00000000000000ffffff00ff00000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00 XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000 XMM08=2064616572206f742064656c69614600 XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000