)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29) 13:31:40 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x4) openat(r0, &(0x7f0000000000)='./file0\x00', 0x14000, 0x40) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 3052.947686] loop3: detected capacity change from 0 to 40 13:31:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) 13:31:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) 13:31:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x2c1, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1ff, 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, 0xf03}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = getpid() kcmp(r4, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x0, 0x4, 0x7f, 0x0, 0x7, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x88, 0x800}, 0x8430, 0x4, 0x0, 0x8, 0x1b2d86fe, 0x1, 0x9, 0x0, 0x3, 0x0, 0x101}, r4, 0xc, r2, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb36818566001000080000000003a781078316f955a3e652b18ae"]) openat(r5, &(0x7f0000000040)='./file1\x00', 0x200400, 0x0) chdir(&(0x7f0000000240)='./file0\x00') [ 3053.045649] syz-executor.7: attempt to access beyond end of device [ 3053.045649] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3053.046758] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:31:40 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c9718dc30ce8fd620401d8ec8dc6607f1bbed1c7caa58ba0aa384ce2e899b3877db0616f12c010a8a38ed6967bc3155b0d4e50f6045b59620022c93a8b8386d7234246f90e078ce667e0f590463fe9086cace5a21", 0x56}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) r1 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x85, 0x53, 0x8, 0x0, 0x100000001, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x915, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x10000, 0x7, 0xc2c1, 0x5, 0x5, 0x5, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000380)={{r0}, {@void, @actul_num={@void, 0x8, 0x2eab895e2d1beabc}}}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3053.049214] syz-executor.3: attempt to access beyond end of device [ 3053.049214] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3053.050810] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3053.082766] loop5: detected capacity change from 0 to 40 [ 3053.088563] loop0: detected capacity change from 0 to 40 [ 3053.090000] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 3053.103776] loop2: detected capacity change from 0 to 40 [ 3053.106023] loop1: detected capacity change from 0 to 40 [ 3053.108852] loop4: detected capacity change from 0 to 40 13:31:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) [ 3053.114604] FAT-fs (loop1): invalid media value (0x7c) [ 3053.115031] FAT-fs (loop1): Can't find a valid FAT filesystem 13:31:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) [ 3053.178710] loop3: detected capacity change from 0 to 40 13:31:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="0dc19e38690c1fd383169c951c7c48da6f674bfb0dc1f12ed03c7c54c80053d6bb3468e81dc96b0f2698f10544b6afa05ca4d541443115fdf0198fc9ba6e130ed9fdce70bc4723ad3b2ed55e02634b0e248390cce622ea34b144bf50b88919c1ae6f389e9202ec0cb9324847c119b4fce4a7e4", @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000180)={0x3e, "456d604a18c9b3d969452bf0b59efa05e1cc8e6fecf3a063b4c37753d73a0563b1221fba3e355ad9e2de4ca41df0f8dd5e8f51029ef6f68f4149602aa03c"}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3053.251105] loop7: detected capacity change from 0 to 40 [ 3053.283111] loop0: detected capacity change from 0 to 40 [ 3053.945736] loop1: detected capacity change from 0 to 40 [ 3053.948249] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value 13:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) 13:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) 13:31:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) 13:31:55 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @remote}, &(0x7f0000000580)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x5, 0x10000, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @loopback, @private=0xa010102, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x1, [0x6f6, 0x7, 0x8, 0x3, 0xffff0000, 0x1]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0x6, [0x8000, 0x6]}, @lsrr={0x83, 0x7, 0x8b, [@multicast1]}, @generic={0x7, 0xf, "56e508447e39e8e7b87d6b44c4"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)={0x2374, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x22f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "0d82660034d74a237e2893ef52dce67a609972736f6234967bfda54e7c1eddda2c1ab642322c32f6c27b0e89288b92685a6e0c7de104047ef958468507980fc940ebd69ae1404f6cdd573cff2ec9e8e0ee212d651ed7874c08020eeb7d2764fa9ae06c31da98b0c4a53fb17d3dac13c953cd1b80cda4f2f7a1aabf3071b4afbbc94a60ee2998a3bf15bdab1680f1a694ce803edf43fb838435836f303136ea61eb4e0fd89f18375311f6cabb91169ee7b189b6b6cd08ec051954c3968217987e10270353487a8e554e4ac8575d4609d1ac97e2ce5e1a2f7890844a7eeee7b3"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xc4\xbc,&\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x132}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfcda}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xfe\\/$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x519}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "855a2b701c5b0bf1c3e1cc7839f16811422e7ef662057ac0a565d4d1f4e6e6d6f2c7abc63e7c312270123f7d7d5c5ab7ff7994a4103a485e2dc682abe0a2bffb2122f04a03e0c98fb98b6cf23a4a056bd25a247855dc36c80b5546c91d8d88986999fe6ed50274ac63"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}]}, 0x2374}, 0x1, 0x0, 0x0, 0x41}, 0x44) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r1, 0x0, 0xfffffdef) 13:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x80}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x19}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x1010) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x400001, 0x102) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r0, 0x0, 0xfffffdef) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x160}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 13:31:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) 13:31:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3068.022742] loop4: detected capacity change from 0 to 40 [ 3068.043168] loop3: detected capacity change from 0 to 40 [ 3068.048946] loop7: detected capacity change from 0 to 40 [ 3068.051774] loop6: detected capacity change from 0 to 40 [ 3068.053796] loop0: detected capacity change from 0 to 40 [ 3068.065299] loop5: detected capacity change from 0 to 40 [ 3068.066227] loop2: detected capacity change from 0 to 40 [ 3068.069671] loop1: detected capacity change from 0 to 40 [ 3068.124495] bio_check_eod: 7 callbacks suppressed [ 3068.124508] syz-executor.0: attempt to access beyond end of device [ 3068.124508] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.125891] buffer_io_error: 7 callbacks suppressed [ 3068.125901] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3068.177033] syz-executor.6: attempt to access beyond end of device [ 3068.177033] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.178197] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3068.206955] syz-executor.1: attempt to access beyond end of device [ 3068.206955] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.208071] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3068.232957] syz-executor.5: attempt to access beyond end of device [ 3068.232957] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.234137] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3068.239031] syz-executor.2: attempt to access beyond end of device [ 3068.239031] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.240167] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3068.246641] syz-executor.1: attempt to access beyond end of device [ 3068.246641] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.247680] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3068.257988] syz-executor.7: attempt to access beyond end of device [ 3068.257988] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.259057] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:31:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3068.294647] syz-executor.5: attempt to access beyond end of device [ 3068.294647] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.296432] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3068.320839] syz-executor.4: attempt to access beyond end of device [ 3068.320839] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.323109] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) [ 3068.357902] syz-executor.3: attempt to access beyond end of device [ 3068.357902] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3068.359958] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3068.362183] loop6: detected capacity change from 0 to 40 13:31:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) 13:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{}, {0x4}, 0x10, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)="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", 0x188, 0x0, &(0x7f00000004c0)={0x2, 0xde, {0x1, 0xc, 0xc2, "a5bb82793256983210e5c65b1ce2cb57569e6fe8e892489075f4984d46c71dfe18f8b88e48b834d39e49cea1251612fd62f7b9dae0bebaa7795aff98cdf440feda05c28d42547ac32b21181e1c4461f5f58a6ee1273a0f1371e2df76369a82430f66a0715fa849840e7868282f3727b53da520d9c6a2f6473f2ce789a3b82df555a3fab1a56d42d40b577bd61856d348ea79914ed94d98250ebcd8037b8cdee59587c6b570822150d469d1ca23346e61e7764c487802e5437128a52b30f5eab2445d", 0xf, "30f2bcc728ef6469076e17c5e72c6c"}, 0x4b, "2da635c1ef14bc08ee23d61000af15fb2ad6b1ed84f055d110c8db769d9b5488d1e00f20ab093d52a865e40ee3259a06fbc0033694c37bcd5930df804cae99fdd6b5dfce4d8ed061dcbc21"}, 0x135}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3068.407216] loop0: detected capacity change from 0 to 40 13:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) r0 = pidfd_open(0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0x5c, 0x5, 0x4, 0x10a, 0x314, 0x9a0, 0x3800000, 0x9}, "d6488f40f2d22589f8642fafddb95f46fd7ce1c03624af91be4e7a9e206c6f4a3a", ['\x00', '\x00', '\x00', '\x00']}, 0x441) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="011a000001000000a1315019", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) r3 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x16b) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = eventfd(0x20) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000000c0)=0x9) sendfile(r3, r1, 0x0, 0xfffffdef) [ 3068.451177] loop1: detected capacity change from 0 to 40 [ 3068.467594] loop5: detected capacity change from 0 to 40 13:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) [ 3068.503974] loop2: detected capacity change from 0 to 40 [ 3068.549647] loop7: detected capacity change from 0 to 40 [ 3068.615837] loop4: detected capacity change from 0 to 40 [ 3081.446464] loop0: detected capacity change from 0 to 40 13:32:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) 13:32:08 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = memfd_secret(0x80000) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x160) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64, @ANYRESOCT], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002840)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) dup(r5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x14400, 0x0) 13:32:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x7}, {0x0, 0x0, 0x7}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x480100, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x29) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000380)}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x100000a, 0x110, r2, 0x10000000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000300)={r5, r6+60000000}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:32:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) 13:32:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) 13:32:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:09 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x7f4af000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff405}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x1000000, [{0x4, 0x8}]}, 0xc, 0x2) 13:32:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) [ 3081.475206] loop2: detected capacity change from 0 to 40 [ 3081.484952] loop6: detected capacity change from 0 to 40 [ 3081.488574] loop3: detected capacity change from 0 to 40 [ 3081.500111] loop1: detected capacity change from 0 to 264192 [ 3081.516415] FAT-fs (loop1): invalid media value (0x01) [ 3081.516806] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3081.521803] loop7: detected capacity change from 0 to 40 [ 3081.525960] loop4: detected capacity change from 0 to 40 [ 3081.532582] loop5: detected capacity change from 0 to 40 [ 3081.581262] bio_check_eod: 5 callbacks suppressed [ 3081.581278] syz-executor.0: attempt to access beyond end of device [ 3081.581278] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.582925] buffer_io_error: 5 callbacks suppressed [ 3081.582936] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3081.596738] syz-executor.2: attempt to access beyond end of device [ 3081.596738] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.597801] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3081.621944] syz-executor.0: attempt to access beyond end of device [ 3081.621944] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.622840] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3081.653743] syz-executor.3: attempt to access beyond end of device [ 3081.653743] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.654819] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:32:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) [ 3081.712715] syz-executor.6: attempt to access beyond end of device [ 3081.712715] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.713773] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:32:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) [ 3081.770852] syz-executor.5: attempt to access beyond end of device [ 3081.770852] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.772774] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3081.781180] syz-executor.7: attempt to access beyond end of device [ 3081.781180] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.782682] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3081.801839] audit: type=1400 audit(1669815129.365:10): avc: denied { map } for pid=12416 comm="syz-executor.5" path="/proc/12416/mountinfo" dev="proc" ino=49776 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 3081.803793] syz-executor.4: attempt to access beyond end of device [ 3081.803793] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.804902] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:32:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/127, 0x7f, 0x10000, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, 0x3ed, 0x8, 0x70bd2d, 0x25dfdbfe, "3e9a244c2aeaee8189a41d08586a6ce61e3abe0ff6dcbb53576858c04c0cb86f7cc464eb43ead0a388732fe74ab1fa8763d60904f04728a57da02e315a0d62b195cba3a2ded03da56204d77092d8444ef71a4ddba3f1c58002ceb0603af5e217201f4afae6dc3559270ad1f152e41ec7173206dd2d324932da00945a4c61941688076a56000cee6044b35052db7782f9d86f34992257fe9f4a55b9cd67565cfe84d4c176a9c3fd", ["", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x100c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) futimesat(r2, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)={{}, {0x77359400}}) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x600000}, 0x108, 0x0, 0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)="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", 0x19c, 0x0, &(0x7f0000000540)={0x2, 0xf9, {0x1, 0xc, 0xa0, "5b5cf111228b915e9efda3b5b2475fe997989c0f41cd58d25c52acdf60f72277fe332c6186458406133ced2039b64aff1324a7b42c94c6b0f03f25ff8ecba3077587393716e9a7878d76698056b0aba6ef4b4b3f48829b4a4f6ddcd401e6873f4c33a3bdb7bd7e2456a57a403a29afbc3514f4dd14bb39af2ba043e90cc85da42cfcc96391e35bd79b6cdc6cc3ce9ce07a1c9a9d01c07f3011ee56c75b165563", 0x4c, "99279d207a41cc98779ea53f00d5bed02405a1a09b6dcbacc05307355b165dbae4d7b8a565a32165d5f127fb27316b719a757d74539955b781e455f9dd02fae75e8d1acddcb95ffd4d56d9dd"}, 0x5e, "5f41a0de8c8c1ff5e2a0cf9c1c41fa6c09c9600369a0c35790b412c4d1986505764064bf05b1ac0f5e0bc7523315cb714da1e68e91900942568035a201169437fc17a6469739ac5a3187d29320d0ed477e79c688a393c5f74098bc9381b0"}, 0x163}) [ 3081.840293] loop3: detected capacity change from 0 to 40 [ 3081.849388] loop2: detected capacity change from 0 to 40 13:32:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) 13:32:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) [ 3081.891491] loop0: detected capacity change from 0 to 40 [ 3081.914696] loop7: detected capacity change from 0 to 40 [ 3081.923795] loop4: detected capacity change from 0 to 40 [ 3081.937896] loop6: detected capacity change from 0 to 40 13:32:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "8f054377219393b245c16563778a35a2485b88c7"}, 0x15, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3081.991696] syz-executor.7: attempt to access beyond end of device [ 3081.991696] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3081.992789] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3082.008681] syz-executor.4: attempt to access beyond end of device [ 3082.008681] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3082.009790] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:32:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) [ 3082.083146] loop5: detected capacity change from 0 to 40 13:32:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) [ 3082.200922] loop7: detected capacity change from 0 to 40 13:32:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) [ 3082.264903] loop4: detected capacity change from 0 to 40 [ 3082.349162] loop1: detected capacity change from 0 to 264192 [ 3082.360883] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 3082.435168] loop3: detected capacity change from 0 to 40 13:32:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3095.033248] loop3: detected capacity change from 0 to 40 [ 3095.046562] loop4: detected capacity change from 0 to 40 13:32:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x20, 0x1, 0x1, 0x20, 0x0, 0x67, 0x4000, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x3, 0x1}, 0x81, 0x4, 0x8, 0x5, 0x1f, 0x8001, 0x5, 0x0, 0x1, 0x0, 0x10001}, 0xffffffffffffffff, 0xc, r0, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) 13:32:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) 13:32:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000180)={{0x3, 0x0, 0x5, 0x3, 0x101}, 0x5, 0xe2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) 13:32:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) [ 3095.050391] loop6: detected capacity change from 0 to 40 [ 3095.056203] loop2: detected capacity change from 0 to 40 [ 3095.103895] loop0: detected capacity change from 0 to 40 [ 3095.118182] FAULT_INJECTION: forcing a failure. [ 3095.118182] name failslab, interval 1, probability 0, space 0, times 0 [ 3095.119162] CPU: 0 PID: 12465 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3095.119755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.120324] Call Trace: [ 3095.120514] [ 3095.120683] dump_stack_lvl+0x8f/0xb7 [ 3095.120976] should_fail_ex.cold+0x5/0xa [ 3095.121282] should_failslab+0x9/0x20 [ 3095.121568] __kmem_cache_alloc_node+0x5b/0x400 [ 3095.121905] ? iter_file_splice_write+0x169/0xcb0 [ 3095.122260] ? iter_file_splice_write+0x169/0xcb0 [ 3095.122612] __kmalloc+0x46/0xc0 [ 3095.122870] iter_file_splice_write+0x169/0xcb0 [ 3095.123203] ? generic_file_read_iter+0x330/0x550 [ 3095.123573] ? generic_file_splice_read+0x1bc/0x4d0 [ 3095.123936] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3095.124180] loop1: detected capacity change from 0 to 40 [ 3095.124299] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3095.125392] ? inode_security+0x105/0x140 [ 3095.125711] ? security_file_permission+0xb5/0xe0 [ 3095.126062] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3095.126432] direct_splice_actor+0x113/0x180 [ 3095.126753] splice_direct_to_actor+0x33a/0x8c0 [ 3095.127093] ? __pfx_direct_splice_actor+0x10/0x10 [ 3095.127451] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3095.127837] ? security_file_permission+0xb5/0xe0 [ 3095.128193] do_splice_direct+0x1bc/0x290 [ 3095.128499] ? __pfx_do_splice_direct+0x10/0x10 [ 3095.128840] ? lock_is_held_type+0xdb/0x130 [ 3095.129160] do_sendfile+0xb1d/0x1280 [ 3095.129456] ? __pfx_do_sendfile+0x10/0x10 [ 3095.129780] __x64_sys_sendfile64+0x248/0x2a0 [ 3095.130105] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3095.130467] ? syscall_enter_from_user_mode+0x21/0x50 [ 3095.130842] ? syscall_enter_from_user_mode+0x21/0x50 [ 3095.131201] do_syscall_64+0x3f/0x90 [ 3095.131488] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3095.131858] RIP: 0033:0x7f9a045e0b19 [ 3095.132130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.133376] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3095.133905] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3095.134406] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3095.134906] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3095.135402] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3095.135905] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3095.136424] [ 3095.137419] loop5: detected capacity change from 0 to 40 [ 3095.138846] loop7: detected capacity change from 0 to 40 [ 3095.178953] bio_check_eod: 8 callbacks suppressed [ 3095.178966] syz-executor.2: attempt to access beyond end of device [ 3095.178966] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.180698] buffer_io_error: 8 callbacks suppressed [ 3095.180709] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3095.197002] syz-executor.3: attempt to access beyond end of device [ 3095.197002] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.198571] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:32:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 13:32:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) 13:32:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) [ 3095.321169] syz-executor.1: attempt to access beyond end of device [ 3095.321169] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.322525] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3095.330746] syz-executor.7: attempt to access beyond end of device [ 3095.330746] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.331902] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3095.341700] syz-executor.0: attempt to access beyond end of device [ 3095.341700] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.342796] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3095.360891] syz-executor.5: attempt to access beyond end of device [ 3095.360891] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.362839] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3095.409043] syz-executor.0: attempt to access beyond end of device [ 3095.409043] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.409932] loop2: detected capacity change from 0 to 40 [ 3095.410674] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:32:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) [ 3095.425179] loop3: detected capacity change from 0 to 40 [ 3095.435043] loop4: detected capacity change from 0 to 40 13:32:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x200, 0x9, 0x0, 0xfffffffffffffff7, 0x4020000}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000300)={'gretap0\x00', r5, 0x8, 0x7, 0x0, 0x80000001, {{0x22, 0x4, 0x0, 0x3, 0x88, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @ssrr={0x89, 0x27, 0x7, [@local, @rand_addr=0x64010101, @remote, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @remote]}, @ssrr={0x89, 0x27, 0x92, [@empty, @multicast2, @broadcast, @rand_addr=0x64010101, @local, @multicast1, @local, @multicast1, @local]}, @timestamp_addr={0x44, 0x24, 0x3e, 0x1, 0x4, [{@loopback, 0x5b}, {@rand_addr=0x64010101, 0xee}, {@empty, 0x7f}, {@private=0xa010101, 0x3}]}]}}}}}) fallocate(r2, 0x6, 0x9, 0x1f) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xd63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3095.589632] syz-executor.3: attempt to access beyond end of device [ 3095.589632] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.590815] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3095.613179] loop1: detected capacity change from 0 to 40 13:32:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) [ 3095.650077] syz-executor.2: attempt to access beyond end of device [ 3095.650077] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.651214] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3095.659960] loop7: detected capacity change from 0 to 40 [ 3095.701629] loop5: detected capacity change from 0 to 262144 [ 3095.719781] syz-executor.4: attempt to access beyond end of device [ 3095.719781] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3095.720991] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3095.728901] loop0: detected capacity change from 0 to 40 [ 3095.747633] loop3: detected capacity change from 0 to 40 [ 3111.202278] loop7: detected capacity change from 0 to 40 13:32:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) 13:32:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) 13:32:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000180)='./file1\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000180)='mountinfo\x00', &(0x7f00000001c0)='./file1\x00', r5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) 13:32:38 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:32:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = getpid() kcmp(r2, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x7}, r2, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) [ 3111.206122] loop5: detected capacity change from 0 to 40 [ 3111.238234] loop0: detected capacity change from 0 to 40 [ 3111.242505] loop4: detected capacity change from 0 to 40 [ 3111.249793] loop6: detected capacity change from 0 to 40 [ 3111.253145] loop3: detected capacity change from 0 to 40 [ 3111.256931] loop2: detected capacity change from 0 to 40 [ 3111.260003] loop1: detected capacity change from 0 to 40 [ 3111.439811] bio_check_eod: 4 callbacks suppressed [ 3111.439835] syz-executor.0: attempt to access beyond end of device [ 3111.439835] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.442141] buffer_io_error: 4 callbacks suppressed [ 3111.442155] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3111.453185] syz-executor.1: attempt to access beyond end of device [ 3111.453185] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.455257] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3111.473170] syz-executor.4: attempt to access beyond end of device [ 3111.473170] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.474614] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3111.484209] syz-executor.1: attempt to access beyond end of device [ 3111.484209] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.485741] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3111.500275] syz-executor.5: attempt to access beyond end of device [ 3111.500275] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.501969] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3111.512715] syz-executor.3: attempt to access beyond end of device [ 3111.512715] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.514188] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3111.518104] syz-executor.7: attempt to access beyond end of device [ 3111.518104] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.519674] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3111.534019] syz-executor.2: attempt to access beyond end of device [ 3111.534019] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.535568] Buffer I/O error on dev loop2, logical block 10, lost async page write 13:32:39 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c253100d688bf1588738f9c087bc831242f61ff2076216b26747ea06ffa9a311a7f24264b3a9fc1813dbd8c18dee072976ce8a637b9c66e4076902b4436fb0ea410b3112ef9b4a354f88a022f398fa26d0e576e220b78032168882cf6"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000300)="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") sendfile(r3, r2, 0x0, 0xfffffdef) 13:32:39 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) fcntl$setlease(r2, 0x400, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3111.566936] syz-executor.5: attempt to access beyond end of device [ 3111.566936] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.568215] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:32:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) 13:32:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) recvfrom(r0, &(0x7f0000000300)=""/212, 0xd4, 0x40000000, &(0x7f0000000180)=@ethernet={0x306, @remote}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) 13:32:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) 13:32:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) [ 3111.722388] loop2: detected capacity change from 0 to 40 [ 3111.735115] loop4: detected capacity change from 0 to 40 [ 3111.738241] loop5: detected capacity change from 0 to 40 [ 3111.739030] loop0: detected capacity change from 0 to 40 [ 3111.813979] loop3: detected capacity change from 0 to 40 [ 3111.856680] syz-executor.4: attempt to access beyond end of device [ 3111.856680] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3111.857861] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3111.881256] loop7: detected capacity change from 0 to 40 [ 3111.910562] FAULT_INJECTION: forcing a failure. [ 3111.910562] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.911580] CPU: 0 PID: 12544 Comm: syz-executor.3 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3111.912185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.912765] Call Trace: [ 3111.912965] [ 3111.913142] dump_stack_lvl+0x8f/0xb7 [ 3111.913444] should_fail_ex.cold+0x5/0xa [ 3111.913763] should_failslab+0x9/0x20 [ 3111.914050] __kmem_cache_alloc_node+0x5b/0x400 [ 3111.914392] ? iter_file_splice_write+0x169/0xcb0 [ 3111.914762] ? iter_file_splice_write+0x169/0xcb0 [ 3111.915265] __kmalloc+0x46/0xc0 [ 3111.915533] iter_file_splice_write+0x169/0xcb0 [ 3111.915896] ? generic_file_read_iter+0x330/0x550 [ 3111.916268] ? generic_file_splice_read+0x1bc/0x4d0 [ 3111.916628] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3111.917010] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3111.917400] ? preempt_schedule_common+0x59/0xc0 [ 3111.917760] ? inode_security+0x105/0x140 [ 3111.918090] ? security_file_permission+0xb5/0xe0 [ 3111.918450] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3111.918842] direct_splice_actor+0x113/0x180 [ 3111.919171] splice_direct_to_actor+0x33a/0x8c0 [ 3111.919528] ? __pfx_direct_splice_actor+0x10/0x10 [ 3111.919900] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3111.920284] ? security_file_permission+0xb5/0xe0 [ 3111.920659] do_splice_direct+0x1bc/0x290 [ 3111.920980] ? __pfx_do_splice_direct+0x10/0x10 [ 3111.921337] ? lock_is_held_type+0xdb/0x130 [ 3111.921676] do_sendfile+0xb1d/0x1280 [ 3111.921985] ? __pfx_do_sendfile+0x10/0x10 [ 3111.922326] __x64_sys_sendfile64+0x248/0x2a0 [ 3111.922670] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3111.923048] ? syscall_enter_from_user_mode+0x21/0x50 [ 3111.923442] ? syscall_enter_from_user_mode+0x21/0x50 [ 3111.923852] do_syscall_64+0x3f/0x90 [ 3111.924150] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3111.924543] RIP: 0033:0x7f1cf7fb1b19 [ 3111.924827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.926124] RSP: 002b:00007f1cf5527188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3111.926678] RAX: ffffffffffffffda RBX: 00007f1cf80c4f60 RCX: 00007f1cf7fb1b19 [ 3111.927194] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3111.927727] RBP: 00007f1cf55271d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.928249] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3111.928771] R13: 00007fff1596d4df R14: 00007f1cf5527300 R15: 0000000000022000 [ 3111.929312] 13:32:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) 13:32:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) 13:32:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040050) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) [ 3112.011063] loop4: detected capacity change from 0 to 40 13:32:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) [ 3112.117692] loop2: detected capacity change from 0 to 40 13:32:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3112.166871] loop3: detected capacity change from 0 to 40 [ 3112.174915] loop5: detected capacity change from 0 to 40 [ 3112.256981] loop6: detected capacity change from 0 to 40 [ 3128.045255] loop7: detected capacity change from 0 to 40 [ 3128.050459] loop1: detected capacity change from 0 to 40 [ 3128.055207] loop0: detected capacity change from 0 to 40 [ 3128.055361] loop6: detected capacity change from 0 to 40 [ 3128.060164] loop5: detected capacity change from 0 to 40 13:32:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) 13:32:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x5804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 13:32:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) 13:32:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 13:32:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:32:55 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/175, 0xaf}], 0x4, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x10002) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x4, 0x8, 0x7}) syz_io_uring_setup(0x1e9e, &(0x7f0000000600)={0x0, 0x6aa7, 0x4, 0x0, 0x1b8, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) read$hiddev(r4, &(0x7f0000000580)=""/58, 0x3a) 13:32:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = memfd_secret(0x80000) accept4(r2, &(0x7f0000000180)=@un=@abs, &(0x7f0000000240)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010800000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3128.075024] loop2: detected capacity change from 0 to 40 [ 3128.105637] loop3: detected capacity change from 0 to 40 [ 3128.111553] loop4: detected capacity change from 0 to 40 13:32:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3128.173098] bio_check_eod: 9 callbacks suppressed [ 3128.173112] syz-executor.7: attempt to access beyond end of device [ 3128.173112] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.174716] buffer_io_error: 9 callbacks suppressed [ 3128.174743] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3128.182828] syz-executor.0: attempt to access beyond end of device [ 3128.182828] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.184420] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3128.198246] syz-executor.2: attempt to access beyond end of device [ 3128.198246] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.199546] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3128.220949] loop6: detected capacity change from 0 to 40 [ 3128.226971] syz-executor.5: attempt to access beyond end of device [ 3128.226971] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.229076] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3128.241706] syz-executor.1: attempt to access beyond end of device [ 3128.241706] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.242784] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:32:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) [ 3128.367267] syz-executor.3: attempt to access beyond end of device [ 3128.367267] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.369603] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3128.379073] syz-executor.4: attempt to access beyond end of device [ 3128.379073] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.380627] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3128.409238] loop7: detected capacity change from 0 to 40 [ 3128.450668] syz-executor.7: attempt to access beyond end of device [ 3128.450668] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.451797] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:33:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) 13:33:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) 13:33:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) [ 3140.423261] loop7: detected capacity change from 0 to 40 13:33:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = getpid() kcmp(r2, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() kcmp(r4, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r4, &(0x7f00000001c0)='net/hci\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x2, 0x121) 13:33:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20c001, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) sendfile(r1, r2, &(0x7f0000000300)=0x4, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() kcmp(r4, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x2908a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x2d90, 0xfffffffffffffffe, 0xaf46, 0x2, 0x4000000, 0xc3fc, 0x0, 0x0, 0xfffff87f, 0x0, 0x9}, r4, 0x80000010, 0xffffffffffffffff, 0x2) sendfile(r3, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6, 0x8, 0x2, 0x4, 0x0, 0x10001, 0x2001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x81, 0xfffffffffffffffe}, 0x10090, 0x80000001, 0x1, 0x2, 0x3, 0x80000000, 0x2, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 13:33:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) [ 3140.455002] loop4: detected capacity change from 0 to 40 [ 3140.455586] loop3: detected capacity change from 0 to 40 [ 3140.458626] loop5: detected capacity change from 0 to 40 [ 3140.459292] loop0: detected capacity change from 0 to 40 [ 3140.461129] loop1: detected capacity change from 0 to 40 [ 3140.461666] loop2: detected capacity change from 0 to 40 [ 3140.463567] loop6: detected capacity change from 0 to 40 [ 3140.540047] syz-executor.0: attempt to access beyond end of device [ 3140.540047] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.540930] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:33:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3140.563688] syz-executor.3: attempt to access beyond end of device [ 3140.563688] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.564764] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3140.571249] syz-executor.0: attempt to access beyond end of device [ 3140.571249] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.572283] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3140.578843] syz-executor.2: attempt to access beyond end of device [ 3140.578843] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.579996] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3140.585597] FAULT_INJECTION: forcing a failure. [ 3140.585597] name failslab, interval 1, probability 0, space 0, times 0 [ 3140.586912] CPU: 0 PID: 12619 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3140.587656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3140.588404] Call Trace: [ 3140.588646] [ 3140.588864] dump_stack_lvl+0x8f/0xb7 [ 3140.589244] should_fail_ex.cold+0x5/0xa [ 3140.589638] should_failslab+0x9/0x20 [ 3140.590003] __kmem_cache_alloc_node+0x5b/0x400 [ 3140.590445] ? iter_file_splice_write+0x169/0xcb0 [ 3140.590901] ? iter_file_splice_write+0x169/0xcb0 [ 3140.591341] __kmalloc+0x46/0xc0 [ 3140.591676] iter_file_splice_write+0x169/0xcb0 [ 3140.592110] ? generic_file_read_iter+0x330/0x550 [ 3140.592578] ? generic_file_splice_read+0x1bc/0x4d0 [ 3140.593081] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3140.593560] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3140.594051] ? inode_security+0x105/0x140 [ 3140.594467] ? security_file_permission+0xb5/0xe0 [ 3140.594920] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3140.595399] direct_splice_actor+0x113/0x180 [ 3140.595815] splice_direct_to_actor+0x33a/0x8c0 [ 3140.596265] ? __pfx_direct_splice_actor+0x10/0x10 [ 3140.596734] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3140.597214] ? security_file_permission+0xb5/0xe0 [ 3140.597716] do_splice_direct+0x1bc/0x290 [ 3140.598116] ? __pfx_do_splice_direct+0x10/0x10 [ 3140.598566] ? lock_is_held_type+0xdb/0x130 [ 3140.598985] do_sendfile+0xb1d/0x1280 [ 3140.599370] ? __pfx_do_sendfile+0x10/0x10 [ 3140.599793] __x64_sys_sendfile64+0x248/0x2a0 [ 3140.600265] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3140.600733] ? syscall_enter_from_user_mode+0x21/0x50 [ 3140.601225] ? syscall_enter_from_user_mode+0x21/0x50 [ 3140.601721] do_syscall_64+0x3f/0x90 [ 3140.602090] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3140.602585] RIP: 0033:0x7f9a045e0b19 [ 3140.602934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3140.604540] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3140.605221] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3140.605857] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3140.606504] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3140.607147] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3140.607786] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3140.608460] [ 3140.619245] syz-executor.7: attempt to access beyond end of device [ 3140.619245] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.620612] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3140.634658] loop6: detected capacity change from 0 to 40 13:33:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) [ 3140.652909] syz-executor.1: attempt to access beyond end of device [ 3140.652909] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.654364] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:33:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="cf8d718ae144ac1a32e8b66ea0c44a744f53ba7785355d2d0374aa6f8204f745f67763a0ee5d1dccc7ea59bcea9e3a0c6a437b7e86511684d032c615744139741302b7c1246c139dc365820460b111ef9a465a8e278a50b2e756ba7ca72bc17a0abf83e090eb40eb37fb676de2d07ce1b376611e6d68f55fc0cb6c2214e34bcf7667db4d87d3270d3ddac13bb84e0ed6396157a7752419624d2bc5e7e02f500b5995ae92d2c564d6e8331538ced3a8164651c9611987a339140fe6c93756f2"]) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3140.665857] syz-executor.5: attempt to access beyond end of device [ 3140.665857] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.667212] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:33:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) [ 3140.688580] syz-executor.5: attempt to access beyond end of device [ 3140.688580] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.689813] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:33:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) [ 3140.736074] loop3: detected capacity change from 0 to 40 [ 3140.742456] loop0: detected capacity change from 0 to 40 13:33:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3140.754723] loop2: detected capacity change from 0 to 40 [ 3140.819931] loop7: detected capacity change from 0 to 40 [ 3140.820258] loop6: detected capacity change from 0 to 40 13:33:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 13:33:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x851, 0x4, &(0x7f0000000580)=[{&(0x7f0000000340)="4f11f63c853e5f2f2e373463c1d7e1d2f28a36280c696227e6c602eb33ab86d7a46994d6ebc57846846511004b66f4d8d87a736d21581865fbb12524f8ee11f3609520b810be24b3c4634357138fb2f5a510c9dd930f51a4ad06ba6b20b5706a5afb8fa4e160ae50d3f35f184815283a826129f05feab5ea10504882748eeb", 0x7f, 0x2}, {&(0x7f00000003c0)="8dd1534daf8df066e4648d9a90741e0fe289d7b25d18e8504547352a812728ce8b469de098d553919b54e83112fbb139c8272815a024dd1e5eb92a928d06cb21653f1bdf95877b128cc5ed1aed0cd416ee7314952e84d0a81b6b7ee3f9", 0x5d, 0x80000001}, {&(0x7f0000000440)="8331472471d4e9e5fbc33c43337080e7365250e864383b63fbe11b2d15cf98e72deb3f584e944c9cf3da6c", 0x2b, 0xfffffffffffffffd}, {&(0x7f0000000480)="902dc4f983df2b31acbf2f6513426ca4eb0cdf7c34df5d690c31d46ecc35b1419cff22606a94d316470945fb0011563eeee756f9ad7da3adaadf5e77fb60f25a473263fe075acbd039e1dad46706e3137028379ffa77e6ae38fec74619541930139af851bf8e53300c373a7f8cf5745a704c64f0168a80e098f062399460fc41e87c14cafda56c46bb1ade5434c105b12245b5503cc776375eb9078698901bf5acaab8b4cdb28fb6dc7e7e32f981a25d677c160821d6bc6d9649d6e926541bdd35fee74d", 0xc4, 0x2}], 0x340019, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) utimensat(r2, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000740)={{r3, r4/1000+60000}}, 0x100) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000180)=@generic={0x3, 0x200, 0x7}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x80010, r0, 0xfc609000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000001c0)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3140.875872] syz-executor.0: attempt to access beyond end of device [ 3140.875872] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.876947] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3140.880225] syz-executor.3: attempt to access beyond end of device [ 3140.880225] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3140.881269] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3140.881840] loop4: detected capacity change from 0 to 40 13:33:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) [ 3140.953540] loop5: detected capacity change from 0 to 40 13:33:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x3, &(0x7f0000000100)=""/139, 0x8b, 0x2}, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd=r1, 0x100, 0xff, 0x7, 0x0, 0x0, {0x2}}, 0x6) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x80102, 0x140) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x501000, 0x98) [ 3141.009612] FAULT_INJECTION: forcing a failure. [ 3141.009612] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.010764] CPU: 1 PID: 12644 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3141.011418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3141.012047] Call Trace: [ 3141.012295] [ 3141.012467] dump_stack_lvl+0x8f/0xb7 [ 3141.012755] should_fail_ex.cold+0x5/0xa [ 3141.013139] should_failslab+0x9/0x20 [ 3141.013417] __kmem_cache_alloc_node+0x5b/0x400 [ 3141.013852] ? iter_file_splice_write+0x169/0xcb0 [ 3141.014208] ? iter_file_splice_write+0x169/0xcb0 [ 3141.014619] __kmalloc+0x46/0xc0 [ 3141.014892] iter_file_splice_write+0x169/0xcb0 [ 3141.015236] ? generic_file_read_iter+0x330/0x550 [ 3141.015664] ? generic_file_splice_read+0x1bc/0x4d0 [ 3141.015991] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3141.016532] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3141.016904] ? inode_security+0x105/0x140 [ 3141.017211] ? security_file_permission+0xb5/0xe0 [ 3141.017616] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3141.018048] direct_splice_actor+0x113/0x180 [ 3141.018356] splice_direct_to_actor+0x33a/0x8c0 [ 3141.018684] ? __pfx_direct_splice_actor+0x10/0x10 [ 3141.019037] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3141.019418] ? security_file_permission+0xb5/0xe0 [ 3141.019778] do_splice_direct+0x1bc/0x290 [ 3141.020050] ? __pfx_do_splice_direct+0x10/0x10 [ 3141.020418] ? lock_is_held_type+0xdb/0x130 [ 3141.020856] do_sendfile+0xb1d/0x1280 [ 3141.021171] ? __pfx_do_sendfile+0x10/0x10 [ 3141.021595] __x64_sys_sendfile64+0x248/0x2a0 [ 3141.021976] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3141.022447] ? syscall_enter_from_user_mode+0x21/0x50 [ 3141.022837] ? syscall_enter_from_user_mode+0x21/0x50 [ 3141.023316] do_syscall_64+0x3f/0x90 [ 3141.023650] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3141.024063] RIP: 0033:0x7f9a045e0b19 [ 3141.024380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3141.025828] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3141.026477] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3141.027021] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3141.027659] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3141.028248] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3141.028877] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3141.029427] [ 3141.033140] loop1: detected capacity change from 0 to 40 [ 3141.094682] loop3: detected capacity change from 0 to 40 13:33:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 13:33:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) 13:33:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) 13:33:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) 13:33:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:23 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x100000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@uname={'uname', 0x3d, 'vfat\x00'}}], [{@appraise_type}, {@smackfsroot}, {@subj_role}, {@obj_user={'obj_user', 0x3d, '$*'}}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xee00}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0x100000001}) sendfile(r2, r1, 0x0, 0xfffffdef) 13:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000180)=@sha1={0x1, "cd7a8e4bccf92126f0dbb0b3415ccfa16951b077"}, 0x15, 0x3) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3156.290648] loop2: detected capacity change from 0 to 40 [ 3156.292218] loop4: detected capacity change from 0 to 40 [ 3156.319218] loop5: detected capacity change from 0 to 40 [ 3156.323248] loop3: detected capacity change from 0 to 40 [ 3156.325110] loop0: detected capacity change from 0 to 40 [ 3156.328884] loop6: detected capacity change from 0 to 40 [ 3156.338127] loop7: detected capacity change from 0 to 40 [ 3156.343023] loop1: detected capacity change from 0 to 40 [ 3156.514267] bio_check_eod: 6 callbacks suppressed [ 3156.514291] syz-executor.2: attempt to access beyond end of device [ 3156.514291] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.516764] buffer_io_error: 6 callbacks suppressed [ 3156.516780] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3156.529239] FAULT_INJECTION: forcing a failure. [ 3156.529239] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.531040] CPU: 1 PID: 12679 Comm: syz-executor.3 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3156.532195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3156.533237] Call Trace: [ 3156.533578] [ 3156.533878] dump_stack_lvl+0x8f/0xb7 [ 3156.534402] should_fail_ex.cold+0x5/0xa [ 3156.534947] should_failslab+0x9/0x20 [ 3156.535449] __kmem_cache_alloc_node+0x5b/0x400 [ 3156.536055] ? iter_file_splice_write+0x169/0xcb0 [ 3156.536701] ? iter_file_splice_write+0x169/0xcb0 [ 3156.537327] __kmalloc+0x46/0xc0 [ 3156.537785] iter_file_splice_write+0x169/0xcb0 [ 3156.538375] ? generic_file_read_iter+0x330/0x550 [ 3156.539028] ? generic_file_splice_read+0x1bc/0x4d0 [ 3156.539673] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3156.540345] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3156.541016] ? preempt_schedule_common+0x59/0xc0 [ 3156.541631] ? inode_security+0x105/0x140 [ 3156.542189] ? security_file_permission+0xb5/0xe0 [ 3156.542805] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3156.543466] direct_splice_actor+0x113/0x180 [ 3156.544034] splice_direct_to_actor+0x33a/0x8c0 [ 3156.544644] ? __pfx_direct_splice_actor+0x10/0x10 [ 3156.545274] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3156.545919] ? security_file_permission+0xb5/0xe0 [ 3156.546551] do_splice_direct+0x1bc/0x290 [ 3156.547082] ? __pfx_do_splice_direct+0x10/0x10 [ 3156.547687] ? lock_is_held_type+0xdb/0x130 [ 3156.548259] do_sendfile+0xb1d/0x1280 [ 3156.548800] ? __pfx_do_sendfile+0x10/0x10 [ 3156.549377] __x64_sys_sendfile64+0x248/0x2a0 [ 3156.549955] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3156.550586] ? syscall_enter_from_user_mode+0x21/0x50 [ 3156.551263] ? syscall_enter_from_user_mode+0x21/0x50 [ 3156.551929] do_syscall_64+0x3f/0x90 [ 3156.552451] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3156.553124] RIP: 0033:0x7f1cf7fb1b19 [ 3156.553595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3156.555775] RSP: 002b:00007f1cf5527188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3156.556716] RAX: ffffffffffffffda RBX: 00007f1cf80c4f60 RCX: 00007f1cf7fb1b19 [ 3156.557595] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3156.558474] RBP: 00007f1cf55271d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.559361] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3156.560238] R13: 00007fff1596d4df R14: 00007f1cf5527300 R15: 0000000000022000 [ 3156.561165] [ 3156.569721] syz-executor.4: attempt to access beyond end of device [ 3156.569721] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.571563] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3156.600194] syz-executor.6: attempt to access beyond end of device [ 3156.600194] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.602221] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3156.610967] syz-executor.0: attempt to access beyond end of device [ 3156.610967] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.612561] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3156.658993] syz-executor.7: attempt to access beyond end of device [ 3156.658993] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.660593] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:33:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3156.682092] syz-executor.1: attempt to access beyond end of device [ 3156.682092] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.683740] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:33:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 13:33:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) 13:33:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) [ 3156.777050] loop6: detected capacity change from 0 to 40 [ 3156.808088] loop3: detected capacity change from 0 to 40 13:33:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) [ 3156.843111] loop2: detected capacity change from 0 to 40 [ 3156.931757] loop4: detected capacity change from 0 to 40 [ 3156.951747] syz-executor.6: attempt to access beyond end of device [ 3156.951747] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3156.953020] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3156.987288] loop7: detected capacity change from 0 to 40 [ 3157.001841] syz-executor.3: attempt to access beyond end of device [ 3157.001841] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3157.003244] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3157.070097] syz-executor.2: attempt to access beyond end of device [ 3157.070097] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3157.071558] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3157.100300] FAULT_INJECTION: forcing a failure. [ 3157.100300] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.101745] CPU: 0 PID: 12697 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3157.102331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.102919] Call Trace: [ 3157.103114] [ 3157.103291] dump_stack_lvl+0x8f/0xb7 [ 3157.103594] should_fail_ex.cold+0x5/0xa [ 3157.103904] should_failslab+0x9/0x20 [ 3157.104194] __kmem_cache_alloc_node+0x5b/0x400 [ 3157.104555] ? iter_file_splice_write+0x169/0xcb0 [ 3157.104922] ? iter_file_splice_write+0x169/0xcb0 [ 3157.105286] __kmalloc+0x46/0xc0 [ 3157.105550] iter_file_splice_write+0x169/0xcb0 [ 3157.105902] ? generic_file_read_iter+0x330/0x550 [ 3157.106272] ? generic_file_splice_read+0x1bc/0x4d0 [ 3157.106629] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3157.107006] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3157.107402] ? inode_security+0x105/0x140 [ 3157.107731] ? security_file_permission+0xb5/0xe0 [ 3157.108099] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3157.108492] direct_splice_actor+0x113/0x180 [ 3157.108828] splice_direct_to_actor+0x33a/0x8c0 [ 3157.109173] ? __pfx_direct_splice_actor+0x10/0x10 [ 3157.109548] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3157.109925] ? security_file_permission+0xb5/0xe0 [ 3157.110297] do_splice_direct+0x1bc/0x290 [ 3157.110591] ? __pfx_do_splice_direct+0x10/0x10 [ 3157.110963] ? lock_is_held_type+0xdb/0x130 [ 3157.111309] do_sendfile+0xb1d/0x1280 [ 3157.111630] ? __pfx_do_sendfile+0x10/0x10 [ 3157.111982] __x64_sys_sendfile64+0x248/0x2a0 [ 3157.112337] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3157.112688] ? syscall_enter_from_user_mode+0x21/0x50 [ 3157.113098] ? syscall_enter_from_user_mode+0x21/0x50 [ 3157.113510] do_syscall_64+0x3f/0x90 [ 3157.113821] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3157.114237] RIP: 0033:0x7f1b54649b19 [ 3157.114528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.115902] RSP: 002b:00007f1b51bbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3157.116507] RAX: ffffffffffffffda RBX: 00007f1b5475cf60 RCX: 00007f1b54649b19 [ 3157.117045] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3157.117582] RBP: 00007f1b51bbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.118119] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3157.118667] R13: 00007ffd48af020f R14: 00007f1b51bbf300 R15: 0000000000022000 [ 3157.119235] [ 3157.120036] syz-executor.4: attempt to access beyond end of device [ 3157.120036] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3157.121260] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3157.160228] loop5: detected capacity change from 0 to 40 13:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) [ 3170.087700] loop7: detected capacity change from 0 to 40 13:33:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) [ 3170.106584] loop3: detected capacity change from 0 to 40 [ 3170.119444] loop6: detected capacity change from 0 to 40 [ 3170.121892] loop2: detected capacity change from 0 to 40 13:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1210c2, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x100}]}, 0xc, 0x2) 13:33:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 13:33:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 3170.126994] loop4: detected capacity change from 0 to 40 [ 3170.159577] loop1: detected capacity change from 0 to 40 [ 3170.167782] loop0: detected capacity change from 0 to 40 [ 3170.170795] loop5: detected capacity change from 0 to 40 [ 3170.180733] FAULT_INJECTION: forcing a failure. [ 3170.180733] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.181822] CPU: 0 PID: 12718 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3170.182387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.182941] Call Trace: [ 3170.183121] [ 3170.183285] dump_stack_lvl+0x8f/0xb7 [ 3170.183576] should_fail_ex.cold+0x5/0xa [ 3170.183873] should_failslab+0x9/0x20 [ 3170.184148] __kmem_cache_alloc_node+0x5b/0x400 [ 3170.184499] ? iter_file_splice_write+0x169/0xcb0 [ 3170.184838] ? iter_file_splice_write+0x169/0xcb0 [ 3170.185434] __kmalloc+0x46/0xc0 [ 3170.185686] iter_file_splice_write+0x169/0xcb0 [ 3170.186010] ? generic_file_read_iter+0x330/0x550 [ 3170.186363] ? generic_file_splice_read+0x1bc/0x4d0 [ 3170.186712] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3170.187069] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3170.187443] ? inode_security+0x105/0x140 [ 3170.187759] ? security_file_permission+0xb5/0xe0 [ 3170.188107] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3170.188474] direct_splice_actor+0x113/0x180 [ 3170.188799] splice_direct_to_actor+0x33a/0x8c0 [ 3170.189125] ? __pfx_direct_splice_actor+0x10/0x10 [ 3170.189476] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3170.189839] ? security_file_permission+0xb5/0xe0 [ 3170.190181] do_splice_direct+0x1bc/0x290 [ 3170.190470] ? __pfx_do_splice_direct+0x10/0x10 [ 3170.190800] ? lock_is_held_type+0xdb/0x130 [ 3170.191106] do_sendfile+0xb1d/0x1280 [ 3170.191390] ? __pfx_do_sendfile+0x10/0x10 [ 3170.191702] __x64_sys_sendfile64+0x248/0x2a0 [ 3170.192020] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3170.192366] ? syscall_enter_from_user_mode+0x21/0x50 [ 3170.192733] ? syscall_enter_from_user_mode+0x21/0x50 [ 3170.193099] do_syscall_64+0x3f/0x90 [ 3170.193374] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3170.193735] RIP: 0033:0x7f3fd70e5b19 [ 3170.193993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3170.195176] RSP: 002b:00007f3fd465b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3170.195681] RAX: ffffffffffffffda RBX: 00007f3fd71f8f60 RCX: 00007f3fd70e5b19 [ 3170.196153] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3170.196640] RBP: 00007f3fd465b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.197117] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3170.197589] R13: 00007ffe67db7a4f R14: 00007f3fd465b300 R15: 0000000000022000 [ 3170.198082] 13:33:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)=@v1={0x2, "17cb8cb339"}, 0x6, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x25, 0x800, 0x4) r3 = openat(r0, &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x1ba) sendmmsg(r2, &(0x7f00000038c0)=[{{&(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000040)="106ca5", 0x3}], 0x2, &(0x7f0000000400)=[{0x28, 0x109, 0x7, "17faeae0a65ca0d40d88e3542207057c5ab14f"}, {0xc8, 0x10c, 0xb89b, "ea469b69973c596b065eb640c6f9cd5c3db0ac251e5d6f398422a7e6d1ea37c705b003d7ee23b7df0afee2412b6c9904b480a23b8422533bfb44d307e42c6be316d31593c3b9e3cf7df778bbc31d495fbc8630bb84982b0b4a798046027d1e5bf1eec45c08ae7258c0aa21ee4c172064635f0e87e7bb6fb292d8d4b8f0e4f0d7a96a8d39c8faafa81858ea9ade2979d171f3f12857ab651911bb211de0d0af1c4585430afb2f3a6617358d27e2e3210186c8c72cb73e88"}], 0xf0}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)="4a5e4d26c11410bde0411c9b89df724634cca1c3e5362279924013464d8e93c46abe1371d54b7665de15681d9d8f4b7efd6553b3abecbc95c121367efcaf0a3ca4eb09781045eeeb692b7ee8875914e5cb964af133e94638a8ad2bbbce8cf42c270f3e67fe3327c3a30b4059c9b71f42cffd73fcd0c4fb463c9668d2d795c756f32310b769a8a43596cfc4d7700734499b5b52877702b920e6eabb529248ba32db7f55", 0xa3}, {&(0x7f0000000680)="59ec42f7b7a6093d319891fc3694dab84c744448d29aba259ac0efe29c10dc8c24df0aa11c587e8af62317242833059757a7e8423817b84e050ce2", 0x3b}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f00000006c0)="d627e0951f94cac7973df9dfc4f68b9efb04bb568cd3362402c4634ea0ace0f08cc7ff6ef7c2b03573683df94a9d301c9490df57e64d5e0387a8a5cb0998fd93727b6ad80983f2013f932c363179d2d413cac30a82ce9d1778e359878fd7bcbb2569fd46bfa1f4ffc4a57f3897a60d86963358d56c087883e95a31c2221b7ae61f816daf47b74f414eac341c6a49a6bbdcd17ef9103a20696576f0a4d5ecb26103fd8d896abe132bf26b88862f0f68baa7856f7c0af399fc1a9900c788478c6f121e64cab969efdb1416589302f57afaa797707f3afe99ec52", 0xd9}, {&(0x7f00000007c0)="249ce19c3fb0b4c39f80dfa866b68f03fdea796a3e023f5a3859c9be0c51c8cca26d1fb590dea42c56c0e6b53baa1dcde1cca102ee0fe93d8434c788368938c1192bb44974e7022005e7f9a221443ed710846e930cd5808343c97c82c1b4d6c1da0b5814c0f9af3afb98637fdc17ce20d68d9acccf2467f7978b90487016ff168b37834737f2da00911e3d12", 0x8c}, {&(0x7f0000000880)="add1f8aacac09a3ccb0e789159d7f5453a42dc1bc7fb902d999f45dd3d24ff48fee5993fa18b9f11ca7441cf0fc2b258ac77de119f0022aa02723396d83f5d46170b7cc91fd06307dc09a55daea4d0e3cd409c601a685128ab69c178c4a613cd28051f63", 0x64}, {&(0x7f0000000900)="b3a7288c67eb731344b2654b955862c58f6ab3b7f507b55fb29d1060bdaa718ffee6970097be5be7066cc9516cc6552b371219fc0e75ba6e0567d591dfb2fb01cc7021de6c6305bc069ec2d68715104e9dd6ac41cecb811f9a4d2c5424", 0x5d}, {&(0x7f0000000980)="1a36edc7612f84e38686278f709fcb96ddb941b19d4458873f48f1f27cb49a484a03568ef80b", 0x26}, {&(0x7f00000009c0)="e1124f6771f3b0ba868b625228856af6c30c17d67e4cf24966d3c7423fd7a88e055ab2e83691c008348ebeae04c114ef90d772f8b057dae813e7fe4964e5c9cb5296e32cb21df5781b4e66430ea2efe88a254ab32469", 0x56}, {&(0x7f0000000a40)="d0104a0ebb98e5d6efc737ee88cea9c77efea5215423087b744e23f64ec12795b3e245611ed8d6ef437f0582", 0x2c}], 0xa, &(0x7f0000000b40)=[{0x110, 0x103, 0x4, "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"}, {0xa0, 0x112, 0x7, "813c2d879167f153a78e0dab0795d5e332d33bac60b8c5bd100454e19223aedb220e0259d05a0eb1afd3dc4c7465747012047d779f3bdce33bad1205534f8307f41240fd2c94be0fb6542a9533f53ceb8190ca4ee28140c7bc1fa6b861f3855e81b94e8bcbafec80b1d4dd664edbd91c0b12217f29179b88287395c3a30e5eae967e30a148f0bc28150e"}], 0x1b0}}, {{&(0x7f0000000d00)=@phonet={0x23, 0x7f, 0xff, 0x3}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000d80)="fcee480a9ba72efa67118be9cc85fd9a4f9af7f8e0c7bc18e42101f40b6b71a455e9acd295fdf247a2a2ac920a7872fa07341d1a66128c9827dedd61aa97868d4dfa38dd25a068b7d024b890f92877ee131990072a35bd51406dfa6f8e41c524f505332dba6d9fb5363e869b53d9e87f3c2a80507b79f1423215cbc202b3431e4968f89d9cacd83c426a61cd765921b324aef3638925fdf6d39b358c0923f449df967811cb26bab2952b135c7e666d", 0xaf}, {&(0x7f0000000e40)="d4c46e0cc25a9cbf14b5dc8f55b126cc8985c8517fe06760600bee032ce5d9b5af1e23fce3dff0b113831b22be0b498ee44d29378a74879403dae488a737b11ba641c4bc52e06576e373f688dfadabab96540bf46654781f9b5c3a3bcd8677e2012f8d0d4728a9091b7cffdf8f6c44e5bb4ada96d8652576607694cfa9b5d80b73000a43b1449e227f99d1c6cb5d83b9f2492a55d4", 0x95}, {&(0x7f0000002f40)="2cf1b0f864f0f2d210b97cae68aeabdc36fcdcf733b85dccb166d1c665440aea750f533a8c434b71ba1dcf9a9f4fb10dc273abfab8973360cc86c53e22832d4a5990804dc167ae98883f546a466a35cb2ffb85b56978303c4851ade1b513155a169053e4b414b241fd4fcd54aadc43b8629eddba94f4725e87276bfc196e623194f8e8b0ca0111de924795cda5", 0x8d}, {&(0x7f0000003000)="0f3c2efd0586b634c361cdf6d9305455258495209f35ab856ac788d64a90c7d6180bcff7c9a56445dab6f718e7e7145ab3cff586532e902ceb5d112b9b1fb66ba4faddf48a595227cf82e062eaae7785e2388712000f965b8044734e2b9c0933d50e0d12004bfdc9c79c1619797ba6434033335150eaca2c06fda28e6a6c12550eb1f1c6a761de3adcab60", 0x8b}], 0x4, &(0x7f0000003100)=[{0x10, 0x105, 0xffffffff}, {0xf8, 0x29, 0x3ff, "2df743501ac1e241f25e9fcdec1ef5bfcb517b329951d649610bab042807db0e62e775aedfbd21168eed5c2924fca37c91c14372876b32f5810fcaa5d21809a919e56eb8bd6d09e01bc953b577c53ad11ff2ae03a15d3f4c842ef496ac2bce146a0a7c2ef46e09e8cbd45885964fb12934aa974d86cbecadcb8ae22fa78a697fcb249736ee4389dfbbdb3297723cd8c03b380949c2ba7383a72810905e4a3879fa19b2b4af900b0380167793fd0ada640f0145f27fc442db608a08fe5a451e4a9e7ba8aa7cfec2b3310c0dba97b54ab167a30a8c5968f9def28ab637bb13fefc96"}, {0xc8, 0x114, 0x6, "48edbf4d1f43e06a6ab9a8d252dadbb2c5e21046d6680e9f9f2807f304c0c682724f247ab7eda0f74d93cc05806472f77194b77c7879bd9aa6886d3fbad78efc5bfc8cf7cde072a0f25c486ccdf2c5ea392157b5014943271539ecb03de0f61e1ddf5e5c541bd3033d525cbdbbeedd3cffb0305c6d31eb797341c3e16c96ddbf75e36d937dadf24ad1993ad83fb4fbcfde3bffc8e1657cfb452f3cde0107e21a36135c9e1bc0c974658a991fcc971e7a10"}], 0x1d0}}, {{&(0x7f0000003300)=@l2tp6={0xa, 0x0, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x1}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003380)="f17e8e8f53a69002919098d36213e858f59631850e9e1efa7acad009433081c68e89894918dcb2615aaef7415902a440500d38a559abbe0e418f2981be923d8e28994f2fa88f3c78199f4613624acca35749d7bc13", 0x55}, {&(0x7f0000003400)="20dd32e95313ed53a3fc3795d590854f707880b43c0e670c47acc3a5a52bc2e5a247a57fbb3d34f3d9520fe540ed22a4eed508bd1e019c05192b04b8c86b13b3da08560ed555a318361648be769ae2be3f894c5f231eff359eaf198eab291ea5f028bead1e12c5180d427742e1e77cbe7cf56423a1298ebb51672c1025f4dbdf7c5aa2a9ef83b062325f11d287ed4f1d06b8012e8131d3937a3a96ebd4f2d68cd8503dccc501d38528ad04aad2cd240f3db655d4bb54b68b3dbc52e714e9f5412cc63a2f20e9ded505c02113b5b629877a46ee683f32730aa64a65bce18b188a2196e7", 0xe3}, {&(0x7f0000003500)="bc18c4f7364835b8f6f6873ca8db366d224991a8b0c6c3a59916dc28", 0x1c}], 0x3, &(0x7f0000003580)=[{0x40, 0x88, 0x80, "be58db93cf12af07d50945506d45d001d71b8a41967760eb39377adc603ec1e138a82691ad4617d66400c12d2ead"}, {0x18, 0x88, 0x80000001, "b67daa7c5a8a"}, {0xf0, 0x10f, 0x0, "cb31c6be5d762d2a44adb7eb05b5022211ff40e19b1e69e65953a77f05d2e4d1739dde74738c5d670415fd72fa88442c174a464b91e0c59dcabe2970609f125630ef674bab71218c056cd48e904f6818d3eb842233f90a3cb74007c5b4f1bf8bc31fb63bb78ceba99fa6548f8ecaf2b722c650e8be23914236754f26bdd70da33b4ac913c8a33a0f62cdcacb93d73e69dfcd32934ad540584776d1f8e6ee7a33574176e14240dfc90923b7c313c71f38036d53a82ba674fc039fee3a04a5b03de37fda69fac0fec89c0c1496a139901f222202cea07ff819758ce5d6c7"}, {0x20, 0x108, 0x5, "ba67b8ce3b6fb02594a850"}, {0x90, 0x104, 0x1, "01b92fb01af0568d9d37bc2b6a099a510094558cb25bb7162ed5f6e2675214c432b279a8c73cc12583e2c3e8a196879a5857e2c91160bf826249941a8506b2038b268cfdf4825df9269937d372206241a677e8d1cccad2268b34bd81af236b092c3f68f6c3fc0929125bb8b85ac9061fd2f668016dab9b74b7ac"}, {0xf8, 0x1a, 0xa00, "1980a4699194a05e45cd6d293dd1a3be6b9a130c1e4849562094f224052565851ff995b4855ed94300d01a074dec6395d4f1e0a41cec7ec340c4c6c4f29aa862e440af6607ce801f3ceb9e4d00ae3b8df03666f9a49149fd9abfa46c14481c91f7bdf9e6f0d5db17cd1860ec574eea8082efb0964bfacb03f9b88e0f6c89704cbc5c9098bf3a1b4a58d69e9add20a1871705f18123fdc974af6ce9f484287b8207bb8be97a4fdd9f71bd57a3f73f0e2f4694ff06435cb0215b7f2d437a9fffb78469b02c806f7df95f9d54b30293892f9cb85e012e670e71bf2f6279f504dda5487b42110b01"}, {0x28, 0x112, 0x400, "14f523483b2f9925220e4d2362331029b690f95b29"}], 0x318}}], 0x4, 0x4000800) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3170.277311] syz-executor.4: attempt to access beyond end of device [ 3170.277311] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.278778] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3170.280645] syz-executor.1: attempt to access beyond end of device [ 3170.280645] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.281502] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3170.291709] loop6: detected capacity change from 0 to 40 13:33:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 13:33:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 3170.371617] syz-executor.7: attempt to access beyond end of device [ 3170.371617] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.373729] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3170.384938] syz-executor.3: attempt to access beyond end of device [ 3170.384938] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.386761] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3170.388800] syz-executor.5: attempt to access beyond end of device [ 3170.388800] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.390604] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:33:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3170.441999] loop2: detected capacity change from 0 to 40 13:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6dd8a02b00080101000440002000f8010000000000", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="75a2db1b7984d2820b98b9659a6a633ca1730da13f183eaca8be55dd916f43b9fbeb7a7bf78af8ca7fd733cfd9fdb9f1b2d474c191b16d6e345a7fbcea2758c9afcb22915b4edea16639a2bb465d152788471c8509f57b0fbe256521869d8327b2f0c08f3719d92ae6a349fdb928c0fd4a8a461130a2b8367a6518f3846a5d0018bd91527531ef", @ANYBLOB="be05e170829ded338cae318062"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x200, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x6400) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x2, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3170.446718] syz-executor.5: attempt to access beyond end of device [ 3170.446718] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.448302] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3170.457238] syz-executor.1: attempt to access beyond end of device [ 3170.457238] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.458527] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3170.470213] loop4: detected capacity change from 0 to 40 [ 3170.494069] loop6: detected capacity change from 0 to 40 13:33:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) 13:33:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 13:33:38 executing program 5: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x40) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000010017e818000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000300)={0x9, 0x6, 0x1, 'queue1\x00', 0x7fff}) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl(r1, 0x8, &(0x7f0000000240)="718977866da4") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) faccessat2(r0, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1200) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000111", @ANYBLOB="01d8c200"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 13:33:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x83) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/51, 0x33}], 0x7, 0xd8f, 0x8878) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3170.598722] syz-executor.2: attempt to access beyond end of device [ 3170.598722] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.599790] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3170.606469] loop0: detected capacity change from 0 to 40 13:33:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3170.613590] FAT-fs (loop0): invalid media value (0x00) [ 3170.613961] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3170.625771] syz-executor.4: attempt to access beyond end of device [ 3170.625771] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.626866] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3170.642293] loop7: detected capacity change from 0 to 40 [ 3170.662674] loop1: detected capacity change from 0 to 40 [ 3170.680704] loop6: detected capacity change from 0 to 40 13:33:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) [ 3170.690019] loop3: detected capacity change from 0 to 40 [ 3170.753311] loop5: detected capacity change from 0 to 40 [ 3170.774951] loop2: detected capacity change from 0 to 40 [ 3170.844835] syz-executor.7: attempt to access beyond end of device [ 3170.844835] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3170.846681] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3171.422910] loop0: detected capacity change from 0 to 40 [ 3171.434901] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value 13:33:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3f, 0x202800) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x0, 0x7ff, 0x2}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000001c0), &(0x7f0000000300)={0x0, 0xfb, 0x68, 0x5, 0x80, "8f6b745376fcad010bbdd144b7adef72", "bdd93770f9ab48cbf507b0cb0077587224aa3087250c7c2d6af7773330534a3b7a78967999e6adcb57ed924279f591a8a5175919066ebc1e76bb93b05c13d38cd2a3acf602595cd1eef569fd5757ebe5e1afbd"}, 0x68, 0x1) 13:33:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 13:33:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 13:33:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 13:33:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = syz_io_uring_setup(0x6c01, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x3, &(0x7f0000000100)=""/139, 0x8b, 0x2}, 0x1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x23d5, 0x8, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_setup(0x6c01, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x3, &(0x7f0000000100)=""/139, 0x8b, 0x2}, 0x1) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd_index=0x2, 0x3ff, 0x0, 0x0, 0x2, 0x0, {0x2}}, 0x8001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:33:59 executing program 5: fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) r3 = getpid() kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x4000, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, r5) sendmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="28a9bbb02adab0c53e3c3756eda0e92f14db4443", 0x14}, {&(0x7f0000000340)="e361df9e11631a", 0x7}, {&(0x7f0000000380)="57b56e5df282fe8121a1c7e3eb43a3db1fc76c0a26085a76a98b2b169874579b33188f13cb30b91e1175026531", 0x2d}], 0x3, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r5}}}], 0x60, 0x1}, 0x80854) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="010001000075890018000000", @ANYRES32=r2, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x3, 0x4, 0x0, 0x20, 0x4, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x2}, 0x5012, 0x0, 0x5, 0x2, 0x1, 0x9, 0xe81e, 0x0, 0xfe, 0x0, 0x3}, r3, 0xa, r6, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000300)=0x3) 13:33:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) 13:33:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3192.386478] loop0: detected capacity change from 0 to 40 [ 3192.418208] bio_check_eod: 2 callbacks suppressed [ 3192.418226] syz-executor.0: attempt to access beyond end of device [ 3192.418226] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.419771] buffer_io_error: 2 callbacks suppressed [ 3192.419784] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3192.445716] syz-executor.0: attempt to access beyond end of device [ 3192.445716] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.446847] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3192.455892] loop4: detected capacity change from 0 to 40 [ 3192.456751] loop7: detected capacity change from 0 to 40 [ 3192.470684] loop2: detected capacity change from 0 to 40 [ 3192.473130] loop6: detected capacity change from 0 to 40 [ 3192.487779] loop3: detected capacity change from 0 to 40 [ 3192.491699] loop1: detected capacity change from 0 to 40 [ 3192.543816] FAULT_INJECTION: forcing a failure. [ 3192.543816] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.545116] CPU: 1 PID: 12780 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3192.545927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3192.546691] Call Trace: [ 3192.546946] [ 3192.547219] dump_stack_lvl+0x8f/0xb7 [ 3192.547617] should_fail_ex.cold+0x5/0xa [ 3192.548039] should_failslab+0x9/0x20 [ 3192.548407] __kmem_cache_alloc_node+0x5b/0x400 [ 3192.548851] ? iter_file_splice_write+0x169/0xcb0 [ 3192.549310] ? iter_file_splice_write+0x169/0xcb0 [ 3192.549753] __kmalloc+0x46/0xc0 [ 3192.550085] iter_file_splice_write+0x169/0xcb0 [ 3192.550511] ? generic_file_read_iter+0x330/0x550 [ 3192.550976] ? generic_file_splice_read+0x1bc/0x4d0 [ 3192.551438] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3192.551914] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3192.552393] ? preempt_schedule_common+0x59/0xc0 [ 3192.552848] ? inode_security+0x105/0x140 [ 3192.553261] ? security_file_permission+0xb5/0xe0 [ 3192.553727] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3192.554230] direct_splice_actor+0x113/0x180 [ 3192.554717] splice_direct_to_actor+0x33a/0x8c0 [ 3192.555165] ? __pfx_direct_splice_actor+0x10/0x10 [ 3192.555684] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3192.556214] ? security_file_permission+0xb5/0xe0 [ 3192.556767] do_splice_direct+0x1bc/0x290 [ 3192.557177] ? __pfx_do_splice_direct+0x10/0x10 [ 3192.557686] ? lock_is_held_type+0xdb/0x130 [ 3192.558107] do_sendfile+0xb1d/0x1280 [ 3192.558494] ? __pfx_do_sendfile+0x10/0x10 [ 3192.558914] __x64_sys_sendfile64+0x248/0x2a0 [ 3192.559333] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3192.559797] ? syscall_enter_from_user_mode+0x21/0x50 [ 3192.560280] ? syscall_enter_from_user_mode+0x21/0x50 [ 3192.560779] do_syscall_64+0x3f/0x90 [ 3192.561153] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3192.561639] RIP: 0033:0x7f9a045e0b19 [ 3192.561984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3192.563585] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3192.564274] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3192.564938] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3192.565589] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3192.566321] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3192.566963] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3192.567738] 13:34:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = fsmount(r0, 0x0, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) [ 3192.656012] syz-executor.7: attempt to access beyond end of device [ 3192.656012] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.657570] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3192.661214] loop0: detected capacity change from 0 to 40 [ 3192.749713] syz-executor.3: attempt to access beyond end of device [ 3192.749713] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.751393] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3192.755038] syz-executor.2: attempt to access beyond end of device [ 3192.755038] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.756940] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3192.846052] syz-executor.0: attempt to access beyond end of device [ 3192.846052] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.847554] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3192.880938] syz-executor.1: attempt to access beyond end of device [ 3192.880938] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.882828] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3192.884621] syz-executor.0: attempt to access beyond end of device [ 3192.884621] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3192.886234] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:34:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 13:34:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x90400, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 3208.238972] loop6: detected capacity change from 0 to 40 [ 3208.245817] loop5: detected capacity change from 0 to 40 [ 3208.254760] loop1: detected capacity change from 0 to 40 [ 3208.258693] loop0: detected capacity change from 0 to 40 [ 3208.261764] loop3: detected capacity change from 0 to 40 13:34:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) 13:34:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') renameat(r2, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000180)='./file1\x00') r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105000, 0x14c) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 13:34:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 3208.308904] loop2: detected capacity change from 0 to 40 [ 3208.340181] syz-executor.3: attempt to access beyond end of device [ 3208.340181] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.341234] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3208.359664] loop4: detected capacity change from 0 to 40 [ 3208.362637] syz-executor.5: attempt to access beyond end of device [ 3208.362637] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.363674] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3208.374103] loop7: detected capacity change from 0 to 40 13:34:15 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) openat(r2, &(0x7f0000000180)='./file1\x00', 0x60100, 0x100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:34:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 13:34:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) [ 3208.448120] loop0: detected capacity change from 0 to 40 [ 3208.455420] loop3: detected capacity change from 0 to 40 [ 3208.462586] loop1: detected capacity change from 0 to 40 13:34:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3208.529818] loop6: detected capacity change from 0 to 40 [ 3208.532112] syz-executor.4: attempt to access beyond end of device [ 3208.532112] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.533284] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3208.570558] syz-executor.2: attempt to access beyond end of device [ 3208.570558] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.571581] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3208.573756] syz-executor.0: attempt to access beyond end of device [ 3208.573756] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.574791] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3208.599123] FAULT_INJECTION: forcing a failure. [ 3208.599123] name failslab, interval 1, probability 0, space 0, times 0 [ 3208.601054] CPU: 1 PID: 12830 Comm: syz-executor.3 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3208.602143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3208.603199] Call Trace: [ 3208.603553] [ 3208.603879] dump_stack_lvl+0x8f/0xb7 [ 3208.604435] should_fail_ex.cold+0x5/0xa [ 3208.605021] should_failslab+0x9/0x20 [ 3208.605561] __kmem_cache_alloc_node+0x5b/0x400 [ 3208.606196] ? iter_file_splice_write+0x169/0xcb0 [ 3208.606862] ? iter_file_splice_write+0x169/0xcb0 [ 3208.607522] __kmalloc+0x46/0xc0 [ 3208.608011] iter_file_splice_write+0x169/0xcb0 [ 3208.608649] ? generic_file_read_iter+0x330/0x550 [ 3208.609362] ? generic_file_splice_read+0x1bc/0x4d0 [ 3208.610049] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3208.610760] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3208.611488] ? inode_security+0x105/0x140 [ 3208.612090] ? security_file_permission+0xb5/0xe0 [ 3208.612761] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3208.613482] direct_splice_actor+0x113/0x180 [ 3208.614110] splice_direct_to_actor+0x33a/0x8c0 [ 3208.614759] ? __pfx_direct_splice_actor+0x10/0x10 [ 3208.615442] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3208.616144] ? security_file_permission+0xb5/0xe0 [ 3208.616823] do_splice_direct+0x1bc/0x290 [ 3208.617406] ? __pfx_do_splice_direct+0x10/0x10 [ 3208.618066] ? lock_is_held_type+0xdb/0x130 [ 3208.618679] do_sendfile+0xb1d/0x1280 13:34:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3208.619240] ? __pfx_do_sendfile+0x10/0x10 [ 3208.620011] __x64_sys_sendfile64+0x248/0x2a0 [ 3208.620642] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3208.621328] ? syscall_enter_from_user_mode+0x21/0x50 [ 3208.622048] ? syscall_enter_from_user_mode+0x21/0x50 [ 3208.622769] do_syscall_64+0x3f/0x90 [ 3208.623316] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3208.624034] RIP: 0033:0x7f1cf7fb1b19 [ 3208.624544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3208.626901] RSP: 002b:00007f1cf5527188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3208.627910] RAX: ffffffffffffffda RBX: 00007f1cf80c4f60 RCX: 00007f1cf7fb1b19 [ 3208.628857] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3208.629815] RBP: 00007f1cf55271d0 R08: 0000000000000000 R09: 0000000000000000 [ 3208.630751] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3208.631691] R13: 00007fff1596d4df R14: 00007f1cf5527300 R15: 0000000000022000 [ 3208.632653] 13:34:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 13:34:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8000001a}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3208.701924] syz-executor.7: attempt to access beyond end of device [ 3208.701924] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.705865] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3208.718893] syz-executor.1: attempt to access beyond end of device [ 3208.718893] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.720657] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:34:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3208.734531] loop4: detected capacity change from 0 to 40 13:34:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) [ 3208.741925] loop6: detected capacity change from 0 to 40 [ 3208.751203] syz-executor.1: attempt to access beyond end of device [ 3208.751203] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.752939] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:34:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 3208.770788] loop5: detected capacity change from 0 to 40 13:34:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 3208.858256] loop0: detected capacity change from 0 to 40 [ 3208.888148] loop3: detected capacity change from 0 to 40 13:34:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x100) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3208.939657] loop2: detected capacity change from 0 to 40 [ 3208.963899] syz-executor.4: attempt to access beyond end of device [ 3208.963899] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3208.965758] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:34:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3209.045506] loop7: detected capacity change from 0 to 40 [ 3209.051058] syz-executor.5: attempt to access beyond end of device [ 3209.051058] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3209.053068] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3209.104857] loop1: detected capacity change from 0 to 40 13:34:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) [ 3209.219498] loop6: detected capacity change from 0 to 40 [ 3209.247213] loop4: detected capacity change from 0 to 40 13:34:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) [ 3209.383061] loop2: detected capacity change from 0 to 40 13:34:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3222.832935] loop4: detected capacity change from 0 to 40 13:34:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 13:34:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 13:34:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 13:34:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x6c}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:34:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 13:34:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000b40)=@random={'os2.', '[*#!\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r3) renameat(0xffffffffffffffff, &(0x7f0000000c80)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000d00)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffff0a47}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000f40)={{r5}, "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"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file1\x00'}) ioctl$DVD_WRITE_STRUCT(r2, 0x5390, &(0x7f0000000300)=@bca={0x3, 0xbc, "efa283c3b13e8142b19c9ecd098a55927b3e59605c1bb416ced6cf69584cf35c8e009db74e0f8ea4fc44ea8d47baa27feb6485d82914ee73d983e896f967c384bcd3325b2d9cb97d306d51aa6c9f9a9bc3248be8fd90bdc9f5e9fa329edb3a29040fb8c67b91c3319e2239d47bb0b51c257648f5414bd793bc789dcbb1c6df718dbcae4f371978272ecd9fdb331d0867a2afc61487180c8eec654c07473dc943472994a941f2222f02811f2e943e4b2fc0a171437919bab9f2de663c"}) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = fsmount(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000bc0)={0x4, 0x80, 0x80, 0xa, 0x2, 0x8, 0x0, 0xb272, 0xc0100, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000b80), 0xc}, 0x29210, 0x1, 0x20, 0x0, 0x5, 0x655, 0x7, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r6, 0x1) [ 3222.864381] loop0: detected capacity change from 0 to 40 [ 3222.881859] loop5: detected capacity change from 0 to 40 [ 3222.888050] loop3: detected capacity change from 0 to 40 [ 3222.898841] loop7: detected capacity change from 0 to 40 [ 3222.915969] loop2: detected capacity change from 0 to 40 [ 3222.930706] loop6: detected capacity change from 0 to 40 [ 3222.935773] loop1: detected capacity change from 0 to 40 [ 3222.948186] bio_check_eod: 8 callbacks suppressed [ 3222.948199] syz-executor.4: attempt to access beyond end of device [ 3222.948199] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3222.949752] buffer_io_error: 8 callbacks suppressed [ 3222.949771] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3222.964845] syz-executor.0: attempt to access beyond end of device [ 3222.964845] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3222.965958] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3223.015954] syz-executor.3: attempt to access beyond end of device [ 3223.015954] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.017004] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:34:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 13:34:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x2, "6242c1fd0cdf9b5a60ce33717f"}, 0xe, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3223.066802] FAULT_INJECTION: forcing a failure. [ 3223.066802] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.067704] syz-executor.2: attempt to access beyond end of device [ 3223.067704] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.068168] CPU: 1 PID: 12883 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3223.068930] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3223.069495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.069511] Call Trace: [ 3223.069519] [ 3223.069528] dump_stack_lvl+0x8f/0xb7 [ 3223.069580] should_fail_ex.cold+0x5/0xa [ 3223.069616] should_failslab+0x9/0x20 [ 3223.072457] __kmem_cache_alloc_node+0x5b/0x400 [ 3223.072910] ? iter_file_splice_write+0x169/0xcb0 [ 3223.073405] ? iter_file_splice_write+0x169/0xcb0 [ 3223.073881] __kmalloc+0x46/0xc0 [ 3223.074234] iter_file_splice_write+0x169/0xcb0 [ 3223.074691] ? generic_file_read_iter+0x330/0x550 [ 3223.075165] ? lockdep_hardirqs_on+0x7d/0x100 [ 3223.075613] ? generic_file_splice_read+0x1bc/0x4d0 [ 3223.076092] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3223.076595] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3223.077104] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 3223.077597] ? inode_security+0x105/0x140 [ 3223.078024] ? security_file_permission+0xb5/0xe0 [ 3223.078502] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3223.079011] direct_splice_actor+0x113/0x180 [ 3223.079450] splice_direct_to_actor+0x33a/0x8c0 [ 3223.079910] ? __pfx_direct_splice_actor+0x10/0x10 [ 3223.080397] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3223.080895] ? security_file_permission+0xb5/0xe0 [ 3223.081396] do_splice_direct+0x1bc/0x290 [ 3223.081815] ? __pfx_do_splice_direct+0x10/0x10 [ 3223.082293] ? lock_is_held_type+0xdb/0x130 [ 3223.082738] do_sendfile+0xb1d/0x1280 [ 3223.083132] ? __pfx_do_sendfile+0x10/0x10 [ 3223.083579] __x64_sys_sendfile64+0x248/0x2a0 [ 3223.084024] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3223.084512] ? syscall_enter_from_user_mode+0x21/0x50 [ 3223.085024] ? syscall_enter_from_user_mode+0x21/0x50 [ 3223.085543] do_syscall_64+0x3f/0x90 [ 3223.085923] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3223.086435] RIP: 0033:0x7f1b54649b19 [ 3223.086800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3223.088666] RSP: 002b:00007f1b51bbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3223.089547] RAX: ffffffffffffffda RBX: 00007f1b5475cf60 RCX: 00007f1b54649b19 [ 3223.090351] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3223.091166] RBP: 00007f1b51bbf1d0 R08: 0000000000000000 R09: 0000000000000000 13:34:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) [ 3223.091965] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3223.092897] R13: 00007ffd48af020f R14: 00007f1b51bbf300 R15: 0000000000022000 [ 3223.093773] [ 3223.117733] loop4: detected capacity change from 0 to 40 13:34:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3223.134928] loop0: detected capacity change from 0 to 40 [ 3223.150104] syz-executor.5: attempt to access beyond end of device [ 3223.150104] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.151106] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:34:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) [ 3223.186512] syz-executor.5: attempt to access beyond end of device [ 3223.186512] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.187402] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3223.188095] loop3: detected capacity change from 0 to 40 [ 3223.202025] syz-executor.1: attempt to access beyond end of device [ 3223.202025] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.203669] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3223.242766] loop6: detected capacity change from 0 to 40 [ 3223.252123] loop2: detected capacity change from 0 to 40 [ 3223.260242] syz-executor.4: attempt to access beyond end of device [ 3223.260242] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.261294] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3223.316618] syz-executor.3: attempt to access beyond end of device [ 3223.316618] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.317709] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3223.319752] syz-executor.0: attempt to access beyond end of device [ 3223.319752] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3223.321252] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:34:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) 13:34:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 13:34:47 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f00000001c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x400) open_tree(r0, &(0x7f0000000140)='./file1\x00', 0x900) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="780fe8f4c49720c3d478e38ce40c68496d7830d049e0c952fd62afa89402d9a417e6e2e324b92199131998564c3d06cb9738fd0d29191b0a509583a36bacf6cd3cd8f5e3c3098e7214e8120300e5a36214c7a23889c864985377f119110665a54623b71766b607816323e3f8d679b7dc3b130100008000000000db2160ad40bdb119f264b2b562bda92929cf000000000000000000", @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpid() kcmp(r5, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x4, 0x7, 0x9, 0x7, 0x0, 0x180000000, 0x14410, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x2, 0x1, 0x2, 0x2, 0x11fe, 0x31e3, 0x5, 0x0, 0x3, 0x0, 0x4}, r5, 0x7, r4, 0x1) sendfile(r3, r1, 0x0, 0xfffffdef) 13:34:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010400f217d4eee46d3f3dc5000000", @ANYRES32=r2, @ANYBLOB="744aad6fe90f18755a9674166fa6b364"]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r6, 0x2f, 0x5, 0x7, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x80, 0x1}}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) shutdown(0xffffffffffffffff, 0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000380)=0x1f, 0x100000000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x410001, 0x0) 13:34:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 13:34:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 13:34:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000f40)={{0x10b, 0x6f, 0x9, 0x8c, 0x3b5, 0xfffffff7, 0x283, 0x101}, "08c94e5a43c9b1aee730c6cc9c942ca10b78f0b07d00fe7e82ed7c8591bd817b74b3ed31939f0faf3518168aea0bd07dd635db4630baf7998f01f96344944e5fc36a70382b349ec62e39994b2d993ee7eb475e78d0fee8b30a8bcbade475982a5ccc04df4077ef027b8af99851be3764271bfecb9b9758909f39f99dd75a81b6ac5d93c0a5679524c4549b09cb5cd384e4f863ea74adbd2ef54ebfbdcfb590cc45c25a29ee58f7b3717b6328d91ebaea756e5597b67e096c400b070a459ee0d9ac627732d5b32b1adccd819f390f706393c8c07fd8022bcac5794178c72e82abd0310f17751e6cf282fd7b709b3f958ab951ca68c4ca719139b5970f2d3bf833674cee1519fd88e629b3364afc548449d8174cc905d7e2c296bd9d8253d7359d03a0bcc6eb480ea0403cbb74bd752fc1063d7f007c6c86777e35bbf36b3bdc944a3989dca70b4147da7e46f1bf0f5d76cae0d9b60f4e916fa07811bc66b4a9c2ff2ece7d0df9e0bdf0efb8d6154c3ced9634bb251a1497a4113d074d90a47262aa12e574bf3d980e5f1b2bba0b43b88455c450a7ed6d81a7b98cbc1f0ef5ad584a11ed3926724015b96e9e40497c87a808f9050980caf9c078447f48b9d4a5c5ce7a7111c81a09c710d96128b9dc097e6a3fb210fc83463325e37ecda796f525239e385753976e62c055b61081ac7230b7adf98e0f1f2e10f29ec4fde9ca21900b1c4caaa2ce28f8475ee12b7ce6aa5fca0de37a0a791a0cca7d0d81019725babdbe98b22b1ecbc1605512b87f9a37c11d0e584b8062368ad1131469f63eec90f0cf168278ebcaa9f9e281a32b6469881f1e4bc4330375278643a2e8059e076540193b1d7fc0fc78a06645ae519255b43bf0de4c7e0b7863ab6d75499396c8b0a083664fc42ac3ccbc28c7f259612248988559152fb7d6280f597e704e5aa27beec5fd7cdc8b33afe053d7e9b94ddd989fa88abe380e254ba1851c83b6e2a6e3750cd9458070cd754a71dcd007f138cce1cc450ca820aba9010a7638833a92b5dbfe00577792a80b88c1ed492a7a1bda1d8788ac0510c664b07f1386c61179b7f311d6e7e606d39f8b56c79d1ba3b596fe61b40328ab3a68034e6827c95dbf57c1423fb92d3593f6da4b1c469171fab8837e3d70b557e8903ba2ced9e7014508f32c26cd69ec55b8874c83afa98bc9a6e1bb37db4cea7c045f91f1aedf2398d0d40e3464c1bbea9edabc8d9f3d8ae7e07d8de340f4628292363de9988586305855f7b7ca958cabb89f66e132bfc357ceee2083e2bb4ba14201781b332e36f66c822162002170ffb0a6564a3e7facd06d5cc87c0cca6efbd428f2103d9d620fdcc66e2597b819cc153a5a5b31d0f2cf3c183032f35a1714dfb352bf6d747953e3dfc6400549412f0ac42dc5827c3bbee77a2ca5edc5f939629744e0fb3ed8d265ec0bc1ae1e452680d24fbf5c024dba81b1f81a56b2e0c74be40b9f8072c06983106f727d1d32724b4164772103d2db2a9673523c3d7469b9da5819c4dd86971e56bbd6910824baa8e6f1b34f865932fdb5ecbb35ed98fd47574c496d7aca1cd4c22e65daa974e2c36241bc6e95898362ddb8883edddbc8b41ce83e8f366244a59e153f0f5fc024e3e849f56833bd484d67ad42372dcb177ccbb4d0d871ab53489e05a2fcce86f59b24831b479798be168bcde59504969785f3483f50dc8712118697e5fccdc6e69b3a6da161d0f3164acda5bba4a2307c7783afa4efc898a370c07e80f71e1ee3d0077a4419ce97c2ec6938dc70bc1f693f64439d14dd1eb7adad77a88279f9a91ab56f2d99481c71720e76caf9bd4390c805eed2763fa831308e8a3e9ac77f5611bdc1dba672ab8d4a50567c1a9ec8db7456b89dfb5c9688b72896cbcacee57ff17ac7a2443ff860b5a5df67dba1ce886b27f9777961ff11250e8cd4a23cc037889e1eea64102f611a3577318d85e4dde612ca6886cb54e044a41d71b67471d1a200392fcf01311bc723dc86f56747515f85b622dd6979c53b798d7bac2482849fc84f6479643b513403d6e0efe64b8a542c1631fb6a30689324c032a751ef35724281e87cdac4688f9e69d8da5f4f591dd9230626e8004b6b41847050304ee91bde64e263b21f67919044613b42c061e54823ae734fc504440dcc39fde0bbd01095ae811dc0ae8c14752a8473f075cdd20dc5accbfc58f837e1340e82128959cb226120a3680fe54a61c07e99b2db5f09637d2e5020c58e6c10915cc55ccdd39fa11b3b19371b7e03e4ce8491c4084817365bc3e11c125e4dc0678d8620c84f5abbe75679c61c81c21e29e38782030c1c933d9f5c2579b3728aa7f54fc0f82f1e4a8aec6c59a77f77b8f75aaf2add2aacfa1afd0c5698507182f96d8e1921f037513805a9369c767a2834c3684421cadbeb12bdde43800f146268b08963c80eec96e985c784ee92464bacfe108219a3515a80111ede1e6906a4de78379a83334166cf8c39e3304eb31984bc9d1c47cab5d0ae3d540e06680596334030c1385b8668646a460b0edb9011f3613e947741c459d4ff5da4d2bf12ab5a26513ad7110840ae277dbe12a3c5dd9cd8b1b38e01dc7bc650e83b0c7fa6c9e1b79db795ac6684a896fde7e3b2f8a5ed0118e5c60d37e23f2f1838eec82b7b8d51fe8a6d23fe8664f50cfd8d846dc38a604bcab19154498e5e9522f84c104d5cc4aa07d915c9de6fe41108b3c303c806c293189b6d86d7e8854903e25fa70e84c22894aacfa5739c5e3d05b74df550ead40f5da18d1831c9b267a848c18507fdd700297caa68f9d676cd0da59b458b94f6356e41ae21b7ff6f501c65333764bd62728154bba48b89501250f9e58de32bd3df7febe3b9f789acf5b2a96cc7419430e01fa0e693053428a290603a6bdb7722277b4b8c879c9a5fd57674a20050449bb32dcaea84464151d9210c615d7c833485a193f4ea2c46d50f7e0a7ee44a4dec08ff9caadf415e290308a39d10ea2a1dfa5d187bf58a321ce6c3eb27bfc4dfebe1d4b6d7a3e6635cf0c6c5023d55ff004174583f30c4332ff164f5c565a1d20d73d5247cb3b66931c6a40842aed0ccf5768666e279460dbf04d79720d49525cc1f61eb3a0ea11202bc6481e5437693158631dcc10601367d7b4f64040e5dde70f5d8acfc4800884378832a0ae0aeea855a0435983ea598339c47c11725ec81e3b62e9e5ff9aba46bc9f89bdceb2fbe6c8d50ac00b5bf8896a6aba06b688651b9ec016f2334f2fd32e392282395fc04fd7402e97bd2a5c2126c22a0749dd38b0186ef8a3823702261e4c309bbeeac4e541dccd11c440557602ff88a13063cf4bbcf09d4d55bbab880b840ccbd986906eb0850ca527a8d7fb3380970a834432b5ade32b89ee35af57827f59e7b39b3261d7f59167a3077e5c101c286d7ae987c513b19856080dfebb0ee0408bba2017a83c002d600f77a07516dd224af0c8f8869ad0c32cd6621dd0ba6e8898fc5c1963eb2e56e231d4ed12a3bab2cad60d0c791a0f454db476af7437a08d4d1c899be2a3aa6690145d65e1e6671d03a583c73948c3319ff76ad89a93b500bc5e02caf14fc519b2436e231ed6fab5743eb70f1e701371f5274521ec69b5ef896bc525b60178e8f8855fda464db2b54ad2b93d40427f0ad5275a81c902011bee50032c9c16fc79eabef22e0727d4af64120ab0fc0d5728876a7ce556ab128de18f7310fd43abbec8ecce466ae3361ac94fe2d99e70aa8375e57afb521439844db84ab6552d52abf403b7eb9caee9c979ecb7d4ed94a4a439bc172c8bfe20d24e45331cd01f2ce0e708cc7b4fa2ff883ed05f0ee82835dacb54256a40a5a1070349936ad83c6c5872757983dc4ce92104954a5ac781368bd110a81aac1f100ae6a0360d10905f833859f7a9ae8a870cd3a729aa631ff5f231db7af0825c36eb47e0b2432ea1af3159246846c8e80d270e05a05f8ce75e88caac549e4ed51f0909ab97e857719def92653abd09915ff6206f39bc35138c38ad888dd411de70536345c15182e095d89ebf70ddcb9d7e228e3d2811680ef0d269857948ea96a1926e270df189c1182733e352f64fc155194469e48ebfcd6a9de2180c9174a405c854291032b0eeaf42409041ac12144e30de2af0facec426063e2b05ddf9e8ef858854b1ad26ca61c6688a018d3f8b76d212b2048ed9c0ac7a4692b45476d3afcb61b560cdbf7d34eaf2742c109dc14cab8a478c4918cb67f636b824c1165b96d0d49fc7ac22cd22ae2ed89ef42ac8477d75c037fb20c228b58b4658a2b88edb02c703ced1e6633d55f1b97bf0075f8e71dc00e948edff64dc07cb4238f13760a6236a2f143aab4e30baaf897731f997e9df16b810f266b6eb941904aee4ba1ead12ba0b1c5fdf7a2c5d0afe6fba78eb73f8e70d0aaa561225c009881b71709e3a70810829512d18b315d7a8881fd54c15c125262c61ad430d4e89053f6005a0ee85098faa8028b6632341f242df275940ab1d5650852fe974699b221aae23302c90e1479d11bb3e10b530491d05de8853978315bdaa8df2e920d57f68384219585185d301d2758f755704e92f37bcfe790b548eff3e6a00aac07d6f8e34d7559a63c50de1767b675bf9fe93b170002500cd9c74b540d7716c5a36052ae25baa95c2b8ed081a4da31fce57b19845a81709d32612a6fa2c4e08aa2713bca5a85681cb7f7bb1755a57e751814f2e85da58653b6db4f6a561371f5162ba358652047e9a1523c8a151e9ff358bc2a3396bc6f2444c646e3c45d1bbf7d7fb70bbe1543354bb3a3bac49877b5a384050f38ea79c3020e09500bfa5e35f7a65f76d3ede55c1690d8dae0f8ce57279361ec0bffbd14dbeb5b4be1c6153eba11604115f7abc867c6ed9411af88823ea78eda82c45be69b8f2af9c128da7963e7923a3a760f67a9574af7eb2a536cc73dbbf398d6b5db2460492cf4d13618d63a65dc34d7552922b873fddedbc413b021971a2730833b554cfcca59c71a5870fcc9daa6f85ad657f39ab8fa29dd9f66bc334a6693dbd57c747b6d8c6c7e9b272ac286bf57378cf33e3d2243f07307cd647a18de253e0d947c8947cdd409e9f7652657a1cab2d04f319d7b3c81f55f7e056e4fddddf8a4ed200448ada1775459e3e7b22047e8df6031e5ad1699bd36563c7f2c04a6330344df4183b11159f369c7131886424cb065f352b405ef06082e8e1a7f0f528bd6c797a0fe464eb20fe77281ac8ef5d0e8b58db05943848be5eda10d07d0cc373a39377093f5330c881bbf5fa6e4666b64f61d253dcb4c5a38f4eb688f8ffcd321ba0c1e64cc1cfe3bfd1b33bb4ea6be06741f094bb75a036b37fa685751c8e106fe88c1c6fc75225ec6d2cc7a4d29f99150cf1d177d3bd36d5c01cc26c22b32d308b2ce429728bbeaf65c3fb86bfb19f432ac91a3c583c2efe9b91e3d56a6e7edd5e33223c24d9d7bddc548c78d38cb7a5d7294f0fe4394a8d3337d275af2d68c989b85abf2534699c0d0b4940987392333bda2a923de9d5ccf7268423391e41a408ba18771f6235fa79206dab26dc2ebfbfff79628308771085baf70bd0d95028bb45da9c776e41c34d1e7809f573b2c290321b61ce6420bcb12a51868fd1a15aefb7074b65e430964a5accc1d130282eddcf2352b6ce8b00d20cf97905e296d73ff6e3137298251df53623c7d7459e9b193e6fe5c9a7326ce5e083fbb0bbb9af1d06beb11cd98bd7c973c7d4ffd9148ccec1cd27685f7600554ac4f3ea91095217b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3239.839683] loop2: detected capacity change from 0 to 40 [ 3239.840252] loop1: detected capacity change from 0 to 40 [ 3239.843124] loop4: detected capacity change from 0 to 40 [ 3239.845035] loop7: detected capacity change from 0 to 40 [ 3239.845136] loop3: detected capacity change from 0 to 40 [ 3239.852237] loop5: detected capacity change from 0 to 40 [ 3239.862043] loop0: detected capacity change from 0 to 40 [ 3239.867633] loop6: detected capacity change from 0 to 40 [ 3239.929834] FAULT_INJECTION: forcing a failure. [ 3239.929834] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.930971] CPU: 0 PID: 12925 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3239.931601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3239.932238] Call Trace: [ 3239.932448] [ 3239.932635] dump_stack_lvl+0x8f/0xb7 [ 3239.932955] should_fail_ex.cold+0x5/0xa [ 3239.933289] should_failslab+0x9/0x20 [ 3239.933606] __kmem_cache_alloc_node+0x5b/0x400 [ 3239.933986] ? iter_file_splice_write+0x169/0xcb0 [ 3239.934384] ? iter_file_splice_write+0x169/0xcb0 [ 3239.934770] __kmalloc+0x46/0xc0 [ 3239.935055] iter_file_splice_write+0x169/0xcb0 [ 3239.935432] ? generic_file_read_iter+0x330/0x550 [ 3239.935823] ? generic_file_splice_read+0x1bc/0x4d0 [ 3239.936220] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3239.936623] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3239.937044] ? inode_security+0x105/0x140 [ 3239.937409] ? security_file_permission+0xb5/0xe0 [ 3239.937790] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3239.938200] direct_splice_actor+0x113/0x180 [ 3239.938564] splice_direct_to_actor+0x33a/0x8c0 [ 3239.938940] ? __pfx_direct_splice_actor+0x10/0x10 [ 3239.939337] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3239.939742] ? security_file_permission+0xb5/0xe0 [ 3239.940140] do_splice_direct+0x1bc/0x290 [ 3239.940471] ? __pfx_do_splice_direct+0x10/0x10 [ 3239.940852] ? lock_is_held_type+0xdb/0x130 [ 3239.941198] do_sendfile+0xb1d/0x1280 [ 3239.941619] ? __pfx_do_sendfile+0x10/0x10 [ 3239.942000] __x64_sys_sendfile64+0x248/0x2a0 [ 3239.942359] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3239.942742] ? syscall_enter_from_user_mode+0x21/0x50 [ 3239.943145] ? syscall_enter_from_user_mode+0x21/0x50 [ 3239.943567] do_syscall_64+0x3f/0x90 [ 3239.943868] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3239.944275] RIP: 0033:0x7f9a045e0b19 [ 3239.944565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3239.945923] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3239.946501] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3239.947040] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3239.947574] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3239.948110] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3239.948649] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3239.949208] [ 3240.029409] bio_check_eod: 2 callbacks suppressed [ 3240.029647] syz-executor.3: attempt to access beyond end of device [ 3240.029647] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.031141] buffer_io_error: 2 callbacks suppressed [ 3240.031152] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:34:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3240.060179] syz-executor.2: attempt to access beyond end of device [ 3240.060179] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.061599] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3240.074800] syz-executor.1: attempt to access beyond end of device [ 3240.074800] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.075823] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3240.104766] syz-executor.7: attempt to access beyond end of device [ 3240.104766] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.106822] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3240.120565] syz-executor.5: attempt to access beyond end of device [ 3240.120565] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.121859] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3240.145769] loop6: detected capacity change from 0 to 40 13:34:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 13:34:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) [ 3240.193911] syz-executor.5: attempt to access beyond end of device [ 3240.193911] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.195590] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:34:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 13:34:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 3240.291913] syz-executor.6: attempt to access beyond end of device [ 3240.291913] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.293956] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:34:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a015abcf0aa549e110ff86614e9c75e06ff8107421c7c92e7f32537fe2d0f2ac56f41b1a"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x1, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3240.422926] loop4: detected capacity change from 0 to 40 [ 3240.424247] loop7: detected capacity change from 0 to 40 [ 3240.426902] loop3: detected capacity change from 0 to 40 [ 3240.429665] loop2: detected capacity change from 0 to 40 13:34:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) lremovexattr(&(0x7f0000004640)='./file1\x00', &(0x7f0000007200)=@random={'btrfs.', 'vfat\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005d80)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/178, 0xb2}], 0x5, &(0x7f00000006c0)=""/184, 0xb8}, 0x20}, {{&(0x7f0000000780)=@vsock, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/201, 0xc9}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/84, 0x54}], 0x3, &(0x7f0000000f40)=""/4096, 0x1000}}, {{&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000a80)=""/108, 0x6c}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/111, 0x6f}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/235, 0xeb}, {&(0x7f0000000d00)=""/99, 0x63}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/129, 0x81}, {&(0x7f0000000e40)=""/164, 0xa4}], 0x9, &(0x7f0000004000)=""/189, 0xbd}, 0xfff}, {{&(0x7f00000040c0)=@nfc, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/148, 0x94}, {&(0x7f0000004200)=""/31, 0x1f}, {&(0x7f0000004240)=""/30, 0x1e}], 0x3, &(0x7f00000042c0)=""/30, 0x1e}, 0x8}, {{&(0x7f0000004300)=@tipc=@name, 0x80, &(0x7f0000004480)=[{&(0x7f0000004380)=""/99, 0x63}, {&(0x7f0000004400)=""/125, 0x7d}], 0x2, &(0x7f00000044c0)=""/85, 0x55}, 0x4}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004540)=""/8, 0x8}, {&(0x7f0000004580)=""/164, 0xa4}, {&(0x7f0000004640)}], 0x3, &(0x7f00000046c0)=""/203, 0xcb}}, {{&(0x7f00000047c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004840)=""/21, 0x15}, {&(0x7f0000004880)=""/255, 0xff}, {&(0x7f0000004980)=""/240, 0xf0}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/229, 0xe5}, {&(0x7f0000005b80)=""/3, 0x3}, {&(0x7f0000005bc0)=""/45, 0x2d}], 0x7, &(0x7f0000005c80)=""/252, 0xfc}, 0x7}], 0x7, 0x20, &(0x7f0000005f40)={0x77359400}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x100, 0x100, 0x8}, 0x18) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x101042, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) pwritev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000005f80)="b42f5dff0c08df70b5f2ac92a50f27db9ff18c8cc8444f42efc78ac4f0f9630f804fd9c5faa56a5efff085cb29856a4065397cc1960b618d456c7016a2010dff64803eb3750e29dbf99ae5433437534fc9da7f516fe9c48c5bbfccd86e8727330789e7cc221186f2b2b0d23eb2be9317e59e410de2b03328132dfa0337e4475ede0b49e158ad00bed0ca93c58efa482d729c42d6fd2d49d91e6154a7a901", 0x9e}, {&(0x7f0000006040)="68683ce0dc3f85f6875fd50af699e3eb846beb34e4315952cabf41c648bd4bed1f245cca31bc7b3cdb5da8e20419998f4f023c86714badd498c2b8ab1c136b6c2f58a739e8c2d60a9528019a11b73bfbc23853ac1ebcab6de0be858d4a77aff28d4f36e9105a61d846c516d8fa05e9f2cc56320c4fd7796be7502bd34ceec20bc5c0991684414d93b52bb7d35c2000ef39435857a37ba7630fcd05b569312aa751b1d58c5c250829e4c07742214a51d3e598f01f987ee2e8bbbdbab024d6b7dc77835b66ee0939086b1eccea718f55cb1a3c5c7d77fc0d12c7b2279ed104bb6d4f5a2747be1ffa932e30bb8985f1e77188cc8d9350323576d80a8d6f526103d8d025799d9dd112278369f288fee34791abc0466b117aa6c747adce1ee6dc06eacafe4722a3a6307ccb48aa668aacdbb67a3824ddb820611dd0da1b1c796b596ee5b27ba41c6042e868b1b7d744c5317794a076dc5aafb9609cf38ea79587539e9e4db6fa3f5812101832f1d431843319fa8edddbdf7898cb627790ef896c875a4d77ca1b03d6ee5a81794e2aaa8ede3d800f4419fbaf4050c0625902cf1a1d7d0ca761d94924ada1c1e941eda924ef398498640a2ed2a13ddb5e7e970bc0ff8031e5a4f9ff0933d5944d63c9d70076a868034b9fb630f800932f0ec64d800fa4a5df3701e7d6fbfd9892dcac09116af4ea11f132a84c64660345d2bc97855668af3c419cbc2c2ccf5c1c3ec4c3a12add5721956362292dd2f35bd77aaf31ead17878e357f2042c579985608db1fec1a42cd7e0f755ccb95e77cf808faee98ae6ff5b91d2de76f02cb095691664a6ddf6b1bbb0a9edf57fa43c0f5bb9433f7899e0d080531be0a540bf72fd85417873d70a89819a2c98aadccf5af839927d72523e57590f985bb473280a59950923fcd75c8afd3b66b0ab871c39256b3d16fa0d9627492ddcd2bad579c2fd6ab90a16dfb660537f96f5928e6046768c6459167c88bb82756590aae702f237789df5b2ccd763f2f4d178751a26bf21afb7990b3c690119d0e104c3ae2c4a036ae64e7049e7fd37db7d8f390bcb9d4845de33b9bca6c09e4e58b07548277b87f406e8593c009f5bda1a9f14e78d16cc639b7a7ea160b288836c9c3299f0c046490905fd050dd5f55a54ff16f409c02431926d6c11ff531e9f164f60e88f32580681965a13b38defe20414ecc9363d05bb77677eae1c2b594d7b001d020d2f98599c8bd1235a263c92cdc2a7ecee8e90e46148633dd551ac25405d1576257ac083e66d33ed8b6334112ff978854e4426d2016292e189d82e199ca9991339d3116a306f8e8ead0c03a4dc953257c9086992f20da8b52c6d5b93d7a805abc0511aa8109772110a659762edfd5b0d5f93e2c1e5254f0043a17ff5cabfd3f69474e9cc3e96d78c4cad1b158022548311864dd28503cc7df148d780ff2a30faf40d8af269cd6c3e540bcacd20faee51a7a51393b405698a21a5985be44d75a835f0dfa3631223e6a5ac523eb3659dc5c9fe8694ca19a9a2e445d6dc314ffdae86e56d2d43fc625623f086c7eb7bb6642d62eeef8bd7fe0a4ff529ac0f31e348e57501c85da245d6cfb18ebb77a9d2115ee5a9488b875d499b3e7e2f96fa1941724f1c42e223ed9015b64801f2f9bb8c45a5096e6c705433481d3513872025281bb75a8a79df59449d39821c0f1b4dd523948d54a9a8096e5f2e601f8482d6f2c9c68dab0b66e4b33fae07872c8285d405b88aac2583eab06863752fbda2708417b828ebe4e2fcac8b40dde5a67547ef2fbae027e239a46db495dbf8e83bf7ce450ef107dc9ce383dd44c76d7692b990416a99ef4b8049f4f9d6812f5dcbe2f043de1eb08967d140ee139a69d459689b6856a0973d6f4e8ce8bf7d33427714c90fcc696de23a6390a01b20536b6a5ac94ccf2b4b60fcb80916c13ede7860c4dddfb456f5d8e413ffa9abd0434c2318705eb1d89d43db44a5895734fb57a942c3d2a42eb34d898c6b1e9098d22fadee23029780aeb04e35ece334565f5152e14bbf9eab8b04c78307c03800392774ea5c662073d2f2f88d756ff687fd1c2d1e5b04bcee29e07bcc63949cc12ee12c6ec5815aabeff36fa4ba04ebd348e542f9aa4fc63c701a597076139d75a5283528bec83d8b294d77c38684ba597a8e3f8980c34124109670c8527ab839b78e1a92c1d6afa1e41485510ff039d89f167b3d79e25c13aa87be91545a90396e2db8d84183259f04d6d86814e26d096429a74ffc105222df2e14fb9a3a04d4fe5597fb26505d9fef71afb754d9779c207e9c654fd6d7c29418cd3a0d14e18e5ed866b26b83f3480bfa416f35a54206b491c1cc4e613e553caf66c2e952db96e861f46f0bc25839f8ccf62c70b0f56dc9222c5b75096fc4c4ab12a558dc69fc41db08b60eadad8e376203d1d3fceae50f6b0abdd0d168e8d17537ce5c26fdb1ffa6ee3e7c40ae047ab03dc567a113cb5729fb6de1149d9d8d12e0ffba714decc541a0cf3e505835a8e16e8cb89448b0fdc64e5e437523c80509a7bb61c007d66995dc15ad155096ceb99fdf2880dad7be39650d5c88635bad4af93991bdf7c004229b5043326c09382d726ff9b8d0c0f6119d3deffaac1084e6d385f355c053b0da71977fb6f0790518d281b03015fcbc394d65413441647c8b54329599a1e512b2382da7ba70c60e1462c234e49611ec2aba56f649a2a3d173cc825d493facdb0df95d35a401d592abfef3aba8d00fd96075be7fd82bc61b332f87cc8cd049d9347cf6a84534ba25c1641cbb191b4874a29fe696c304a2661b76027b7ecc2d3133847b1c82a9052cacb9dd57b45bf909a9e9b110216e6152033da8e3f73ae5fa04181e6f78954c4edc48cde2eec7ad3e1723ec8eddfce43a7065754df19482d771b0aac563e9f6bbfd961c2a574804f296b4371a69037a7649850373c44209b8eaa82a8fb733524e1ceeb43d7c903fa5461b469f0a6edd23919de883972d75e82b395b062d85d55efbaa590aadae3ae2f063f25bc0db001076e024fb6869cd8ad7cb0f3bf1d6257802dd6423ce7141fc8ef0b10f03cd1a4ecca6b71cc51d043ea502fcd91be9a67aaadbe065cb52a3d6825df66d87c7e103a6a7992eaf7dce65715b9b0edc771b38cbeb84604429f1c8759acccc7f08c9d3f3fb72319da87920da540b69890b109da88aaba7be8581bff300d2dd5ad7e5b5926fa330334b445afd18f474695a672d4830ae59d965040827608d28df3d59f86081a0a94ceb098846ce329a3c6b33463d42387237d6a4eee22e817b2d4cba6bf3ccf243280947abe1d43178c86e7d2bb40eeca587909932b3578a3f2c54c1652f1ca9258b69568146165a96f83f17bf911e567ccb472a3b368a7cd12af68bdf06b60b1a118418d0be051107ab57a9baaf5509a5d63f2807f0e528979f4c836f723b6e211a8f766397de33e47c0d0547c03ca06fec851316dbe2f2f6852c6d8d4d2fcf35251f037d4719ddad5d00cdf9d62857c944ac3a07b3d69cd04f40f3a78cfd801d012a3ca300a242863d4616dd35b53056c7ae94a4db314a550b2ddc83692ae8f4e66b608eb9503577df306991b3861a4c004224a4d0bc97cc9f2f769a5dd0fd3a29233e39841d09d35c9a631a5c7c3dbac5945fab282c64f59eded14fbd40bdb73f6507d8725e4a032433786725d024a79f2113f19492e553e729c081685cf2e4df6d8b9e4ad2c703d479a29daefcff98ed38a76ea533a43793dc7a8825076c47114e1f9cece04fe0bb20b2887523e163621576ae85f61f7a0b26cdf33fb3c9cde7dff712b01a74dfcaf29aa05e2678ebb25a35bd7edd7d3e535a3097e4a8bf379d626e3f4f37e9207c5b8b6837a7397de46001f3e139749e885e1044dafa23c033113712d3c2128da775b9f585f0204f8e4226ca94b2b145535794e384edd2f674ccec39a6d80a663eb2a7865f4a90b4478a41e3ecb0bdbc3fc03310394cb5cac9cfa795ff6ccb7444bb674185e13042641becb4d351ea88db256e5616ceaeda633eb53a003495ed01af7c7ad968e87c3cc025fad8443ba5da0ae80bd7c90157f3e37c110a88064eae4e5708b217b5cc49e475b3ffd8faa7412e71031f4ea64b83f6c1ed3cd7cde0a2c623b8ca5d7aa41db63c02cb6d5c7c2d768ca5556867096daac05783b66ee8e9885181012c58515e8112ab6a3a59a1348b57cabc074c035409dc7cd3d974757d6a19c2b63b258a7ec89ea5cacb091317073a911e43c14a01fd31c0f8f24020f53218c09ae3a0f9ff5b1927f8fb59b2d92be52c31f4123bde04a6bda8c8972d53599f551f245cbf7b88e2c81c99ce9093ac3ff5b62e80b5d34b0889fdc95d1bbd0cb90a389116f97604d75a6c9c3d1bb43762f43f06fe326ca0beed5615d727cff203a30b47257589f7e3916b4b89a11bde33e5a5c25dcfe79d4fde4a0ebb1bd5449c9c92f115029a17884ccda255a67e24e9b4d9af52dfef881dfad108ac5741a448ce805d096bdfe2a2e919a1cd6cbf7415e0f88815b90a258eaf61157181b0a5ddb276790f062b809c55ea69095511a90abadef41037beea1f5d7d323e2e1bd72905c6bb9f3a3cfb7781af77100751f7f33ec9228237d99e648a8619abc534c990b0b4ffa7236078acb6b6186d4b47c225587464b187d9f76dc9426dda23a474cb4352a9dfc59614c1259b2506ea8783f184fede5bfa21eac8310005b94aec1e14779cefac6516d53eeac27267e57ace5194045c51490bad17aa1d7f2ae4906e2de7e55f558d75926a539f085b2b7f64d58790dd3d9a417631896976b1c853c26592303577a55929803b8e08cbfadb0955d6e847bbdfd141ad87b899169962e6666f960af1b6fadc3cf14bbb91887daffa5f9d2e386caa951ca21daf8fcf1b3beeef49e004527a2f2067f39dbb4b8c98b1b57b77d002eaa792a6def1b7b7a468b2bcd194c05a1c339d1f3678d97f5c8cda49546d072231fde8b4597c58b3ce75b0bd9c43c7a0ed16a02ff8e296d83bc16fe5181b0915ce21cf306c250056d498442784ccb50f09eba3d8049c0e0faffc3e884b9fad33ce739095fe109b8355a145a7bf2469dac2bf8f92fc0a18d05227b033ba5d3aad62479537dc03925c17938feb77a55651a424d50fa67631030f759a5edbf89b34911c50121b3736af841fb9f4aced9cb922233f4d223707447493b71bc1b1eb4af062b27d04ec24890795138e67fe4032e3a89c1924f5b4cad1c4daa576953c5d56b9c9930722e3607a805306a6c2a4c1648d2688eda751aaad4e2194b2a6afecefca0e6b75afb89090283543a690796a1a72f36048339835dc8e1d8b6b2374b0e3392d6e27e2cf1b23a55b5ba65ed9e605d3e6025527e91828e455a846b2fdd1c67bc501456963467e1973e55e282234966a76ba99767a12ffdf53221b950473fa2948200a42ca2ae6d9020543ebd9e92f45f4400c0f18ed7b48e00fca425b4278274915aca8cf4d9ae2d7653362819a250ffe4b4f4a4fda1f3deb0350282c2f4812ee177c819ad578dbb9ed08bbbd31485341ec382121be3276a3b8d207e8bea3ea543f53dc82f363890a540b6d16011f2e4c74f06cd19e58582917eab9484be0fa52ba994eda4438ffacc005cb22b2f0c10c699c634d63c54f08e4e4e35ce53796178ffe9f70a46d13e152c9294b091570059d7440a99399e6fe1e8a62704bacc8faacf95ecdfa1b43fdb4955dda6f8c1f2b782ab96a4ccb1e04f88adecb837b227604b1e4f6045417d39e894a0478", 0x1000}, {&(0x7f0000007040)="b99e01b5efdf2fceef5d2e2b0cdb281054ac502e1f7bb29b24b7dbf020a697487f99e3c127b7c02256724b0e0be617f94ebd65c3e6622b057d5391e34859195742f742810a0e09c7ef803d7750bcf53f6a7150a12473636470d00638361beceaf2b38b904ad1b663048cb6ef8ba5d8e840fcd4a47660781e63dc3be1aa7d327d51496cadd51b13bdc4b1451a7949b566297883c8e931e744a0bc400aed70b50af930ca51e9bad35d88b8a1ffb4cf41d428a0d312d2827e43b4d2819d7f0976e43ac705e4e437252fa203b4733b6bc7ee0a8998cab129ac74661dcb9553f349e21ea1", 0xe2}, {&(0x7f0000007140)="bff6e97349d2bb302855b3339b0e19e5cd1e24abba2ea03011a2aa64ac028fa45376ab85453937f4420f5258685791451814737580d799457fcf88598844860aad983d07482b8cd35ad406706168fee4cc121cc9b54b3114decd194f75a67debcab7d44b2f5063a9c41f1b9dab5b89002381ee2617a3710eba32b0d8e1ec62a003c6867f05d479335f640cf5347eb57623d4bca7f0669f1ed19919f55014", 0x9e}], 0x4, 0xfffffffd, 0xf0d) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) fallocate(r3, 0x42, 0xffffffffffffffb4, 0x5) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000007240)=0x2) 13:34:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3240.642373] loop1: detected capacity change from 0 to 40 [ 3240.671482] loop6: detected capacity change from 0 to 40 [ 3240.794966] syz-executor.2: attempt to access beyond end of device [ 3240.794966] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.795031] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3240.809287] syz-executor.3: attempt to access beyond end of device [ 3240.809287] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.809721] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3240.825919] syz-executor.7: attempt to access beyond end of device [ 3240.825919] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3240.825971] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:34:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 13:34:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x10) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x2f, 0x33, 0x3f, 0xffffffff, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1, 0x7, 0x1, 0x7fffffff, 0x8}}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3241.204957] loop2: detected capacity change from 0 to 40 [ 3241.228265] loop0: detected capacity change from 0 to 40 [ 3241.297851] loop5: detected capacity change from 0 to 40 [ 3241.315030] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 3258.411638] loop4: detected capacity change from 0 to 40 [ 3258.428153] loop6: detected capacity change from 0 to 40 13:35:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x79}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000340)={0x101, 0x605c, 0x3, 0xffff8624, 0x4, [{0xee5e, 0xe276, 0xb82f, '\x00', 0x400}, {0xffffffffffff3ae7, 0x2, 0x10000, '\x00', 0x85}, {0x100, 0x3, 0x5, '\x00', 0x2}, {0x7, 0x6, 0x0, '\x00', 0x3a80}]}) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) 13:35:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000001c0)='%[}\x19)\x00', &(0x7f0000000240)=']-\x00', &(0x7f0000000540)='vfat\x00', &(0x7f0000000580)='(#[^-\x00', &(0x7f00000005c0)='.#-\xdb!{]\x00', &(0x7f0000000600)='vfat\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='}+\x00', &(0x7f00000006c0)='mountinfo\x00', &(0x7f0000000700)='mountinfo\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='vfat\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:35:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB='./file\x00\x00x0\x00']) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000340)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x40002, 0x118) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x7432}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 13:35:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 13:35:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) [ 3258.445312] loop2: detected capacity change from 0 to 40 [ 3258.450441] loop0: detected capacity change from 0 to 40 [ 3258.456825] loop1: detected capacity change from 0 to 40 [ 3258.482747] loop3: detected capacity change from 0 to 40 [ 3258.502114] loop7: detected capacity change from 0 to 40 [ 3258.505905] loop5: detected capacity change from 0 to 40 [ 3258.528660] bio_check_eod: 4 callbacks suppressed [ 3258.528673] syz-executor.6: attempt to access beyond end of device [ 3258.528673] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.530154] buffer_io_error: 4 callbacks suppressed [ 3258.530181] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3258.539588] syz-executor.4: attempt to access beyond end of device [ 3258.539588] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.540736] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) [ 3258.616166] syz-executor.1: attempt to access beyond end of device [ 3258.616166] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.617546] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3258.624222] syz-executor.3: attempt to access beyond end of device [ 3258.624222] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.626071] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3258.710911] syz-executor.7: attempt to access beyond end of device [ 3258.710911] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.712138] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3258.718858] syz-executor.0: attempt to access beyond end of device [ 3258.718858] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.720849] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3258.721501] loop4: detected capacity change from 0 to 40 [ 3258.726016] loop6: detected capacity change from 0 to 40 13:35:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) 13:35:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "ac04dcc9e86c0f71d0d5297116ab1f06"}, 0x11, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3258.748079] syz-executor.2: attempt to access beyond end of device [ 3258.748079] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.750964] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3258.793945] syz-executor.5: attempt to access beyond end of device [ 3258.793945] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.795816] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3258.805621] syz-executor.0: attempt to access beyond end of device [ 3258.805621] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3258.807255] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3258.878914] FAULT_INJECTION: forcing a failure. [ 3258.878914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3258.885057] CPU: 0 PID: 12994 Comm: syz-executor.4 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3258.886138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3258.887177] Call Trace: [ 3258.887521] [ 3258.887845] dump_stack_lvl+0x8f/0xb7 [ 3258.888365] should_fail_ex.cold+0x5/0xa [ 3258.888438] loop1: detected capacity change from 0 to 40 [ 3258.888920] prepare_alloc_pages+0x178/0x500 [ 3258.890204] __alloc_pages+0x149/0x500 [ 3258.890743] ? __pfx___alloc_pages+0x10/0x10 [ 3258.891332] ? __pfx___lock_acquire+0x10/0x10 [ 3258.891954] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3258.892604] alloc_pages+0x1a0/0x260 [ 3258.893109] filemap_alloc_folio+0x32a/0x410 [ 3258.893708] ? __filemap_get_folio+0x254/0xc90 [ 3258.894309] ? __pfx_lock_release+0x10/0x10 [ 3258.894888] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 3258.895508] ? xas_start+0x157/0x6a0 [ 3258.896018] ? xas_load+0x6a/0x140 [ 3258.896498] __filemap_get_folio+0x32c/0xc90 [ 3258.897111] ? __pfx___filemap_get_folio+0x10/0x10 [ 3258.897806] ? __mark_inode_dirty+0x68c/0xe70 [ 3258.898419] pagecache_get_page+0x2e/0x130 [ 3258.899004] ? __pfx_fat_get_block+0x10/0x10 [ 3258.899578] block_write_begin+0x35/0x450 [ 3258.900104] ? lock_release+0x3b6/0x750 [ 3258.900654] cont_write_begin+0x4fe/0x700 [ 3258.901212] ? __pfx_fat_get_block+0x10/0x10 [ 3258.901830] ? __pfx_cont_write_begin+0x10/0x10 [ 3258.902441] ? __mark_inode_dirty+0x68c/0xe70 [ 3258.903069] fat_write_begin+0x89/0x180 [ 3258.903598] ? __pfx_fat_get_block+0x10/0x10 [ 3258.904164] generic_perform_write+0x25a/0x580 [ 3258.904316] loop3: detected capacity change from 0 to 40 [ 3258.904784] ? __pfx_generic_perform_write+0x10/0x10 [ 3258.906101] ? __pfx_fat_update_time+0x10/0x10 [ 3258.906715] ? __pfx_file_update_time+0x10/0x10 [ 3258.907322] ? generic_write_checks+0x2c0/0x400 [ 3258.907945] __generic_file_write_iter+0x308/0x4b0 [ 3258.908590] ? do_sendfile+0xb1d/0x1280 [ 3258.909108] ? __x64_sys_sendfile64+0x248/0x2a0 [ 3258.909730] generic_file_write_iter+0xe7/0x350 [ 3258.910357] do_iter_readv_writev+0x211/0x3c0 [ 3258.910982] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3258.911642] ? avc_policy_seqno+0xd/0x70 [ 3258.912178] ? security_file_permission+0xb5/0xe0 [ 3258.912844] do_iter_write+0x18b/0x700 [ 3258.913367] ? lock_is_held_type+0xdb/0x130 [ 3258.914110] vfs_iter_write+0x74/0xb0 [ 3258.914637] iter_file_splice_write+0x73e/0xcb0 [ 3258.915258] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3258.915921] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3258.916613] ? lockdep_hardirqs_on+0x7d/0x100 [ 3258.917199] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3258.917967] ? do_splice_to+0x141/0x240 [ 3258.918484] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3258.919161] direct_splice_actor+0x113/0x180 [ 3258.919748] splice_direct_to_actor+0x33a/0x8c0 [ 3258.920339] ? __pfx_direct_splice_actor+0x10/0x10 [ 3258.920984] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3258.921720] ? security_file_permission+0xb5/0xe0 [ 3258.922371] do_splice_direct+0x1bc/0x290 [ 3258.922928] ? __pfx_do_splice_direct+0x10/0x10 [ 3258.923562] ? lock_is_held_type+0xdb/0x130 [ 3258.924144] do_sendfile+0xb1d/0x1280 [ 3258.924682] ? __pfx_do_sendfile+0x10/0x10 [ 3258.925260] __x64_sys_sendfile64+0x248/0x2a0 [ 3258.925877] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3258.926505] ? syscall_enter_from_user_mode+0x21/0x50 [ 3258.927199] ? syscall_enter_from_user_mode+0x21/0x50 [ 3258.927893] do_syscall_64+0x3f/0x90 [ 3258.928393] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3258.929063] RIP: 0033:0x7f9a045e0b19 [ 3258.929545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3258.931787] RSP: 002b:00007f9a01b56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3258.932892] RAX: ffffffffffffffda RBX: 00007f9a046f3f60 RCX: 00007f9a045e0b19 [ 3258.934089] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3258.935259] RBP: 00007f9a01b561d0 R08: 0000000000000000 R09: 0000000000000000 [ 3258.936436] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3258.937604] R13: 00007ffce89f606f R14: 00007f9a01b56300 R15: 0000000000022000 [ 3258.938780] 13:35:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) 13:35:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 13:35:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x81) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3259.042599] syz-executor.4: attempt to access beyond end of device [ 3259.042599] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3259.043919] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3259.084001] loop0: detected capacity change from 0 to 40 [ 3259.094625] loop2: detected capacity change from 0 to 40 [ 3259.105034] loop7: detected capacity change from 0 to 40 [ 3259.169612] loop5: detected capacity change from 0 to 40 [ 3259.249568] FAULT_INJECTION: forcing a failure. [ 3259.249568] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.250942] CPU: 0 PID: 13009 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3259.251661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3259.252376] Call Trace: [ 3259.252618] [ 3259.252836] dump_stack_lvl+0x8f/0xb7 [ 3259.253210] should_fail_ex.cold+0x5/0xa [ 3259.253605] should_failslab+0x9/0x20 [ 3259.253993] __kmem_cache_alloc_node+0x5b/0x400 [ 3259.254419] ? iter_file_splice_write+0x169/0xcb0 [ 3259.254870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3259.255373] ? iter_file_splice_write+0x169/0xcb0 [ 3259.255820] __kmalloc+0x46/0xc0 [ 3259.256159] iter_file_splice_write+0x169/0xcb0 [ 3259.256601] ? touch_atime+0xf0/0x700 [ 3259.256968] ? generic_file_splice_read+0x1b7/0x4d0 [ 3259.257423] ? generic_file_splice_read+0x1bc/0x4d0 [ 3259.257887] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3259.258364] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3259.258841] ? preempt_schedule_common+0x59/0xc0 [ 3259.259286] ? inode_security+0x105/0x140 [ 3259.259690] ? security_file_permission+0xb5/0xe0 [ 3259.260146] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3259.260628] direct_splice_actor+0x113/0x180 [ 3259.261047] splice_direct_to_actor+0x33a/0x8c0 [ 3259.261487] ? __pfx_direct_splice_actor+0x10/0x10 [ 3259.261954] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3259.262423] ? security_file_permission+0xb5/0xe0 [ 3259.262881] do_splice_direct+0x1bc/0x290 [ 3259.263270] ? __pfx_do_splice_direct+0x10/0x10 [ 3259.263717] ? lock_is_held_type+0xdb/0x130 [ 3259.264130] do_sendfile+0xb1d/0x1280 [ 3259.264506] ? __pfx_do_sendfile+0x10/0x10 [ 3259.264924] __x64_sys_sendfile64+0x248/0x2a0 [ 3259.265339] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3259.265807] ? syscall_enter_from_user_mode+0x21/0x50 [ 3259.266286] ? syscall_enter_from_user_mode+0x21/0x50 [ 3259.266776] do_syscall_64+0x3f/0x90 [ 3259.267137] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3259.267615] RIP: 0033:0x7f3fd70e5b19 [ 3259.267960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3259.269559] RSP: 002b:00007f3fd465b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3259.270251] RAX: ffffffffffffffda RBX: 00007f3fd71f8f60 RCX: 00007f3fd70e5b19 [ 3259.270891] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3259.271523] RBP: 00007f3fd465b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3259.272168] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3259.272803] R13: 00007ffe67db7a4f R14: 00007f3fd465b300 R15: 0000000000022000 [ 3259.273464] 13:35:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3274.078036] loop4: detected capacity change from 0 to 40 13:35:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "426d5df9eb2a3398022eeb029d679e5f194db365"}, 0x15, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(r1, &(0x7f00000003c0)='./file0/file1\x00', 0x648402, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0xb}, 0x41008, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) syz_io_uring_setup(0x11e2, &(0x7f0000000280)={0x0, 0x1078, 0x0, 0x0, 0x1a, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000958000/0x4000)=nil, 0x4000, 0x14, 0x1}, 0x6) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000480)='./file1\x00') mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff) 13:35:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 13:35:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) 13:35:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x6, 0x0, &(0x7f0000000240), 0x1, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32, @ANYRESHEX=r1, @ANYRES64]) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x642af9e4}, 0x2, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)="5afa5f1dd771f2529d1b3d13e79126956a2adb9b43a934fe0d6fadaa40494b79bac8c9f1a65b275d960ff8c5d56d9fcab00ead9ac1c4e567b62e7ed25615c0b78b6a9617db3028a6491dad7ecfa3c6bd8f4934ea0c453b91a6c5ad65a4b442a9f224ba9efa796470e93b304f79746860697d3e62732681b0f4b35693bb89dc9930af4208b09d469e11b76ee85970980c1ac50a605c9b4ea8360363033df1a116dbc3ac785fd858ef6a6688b1ef4473d4f5d80e3ed74e1d8d81e0bd2b5aee620fdb4e4737682c8c8d41345286125ffeaffc7f3a6c4c3e3582f7709832dfe71f47165a69405f538315e6011ba055db3bcfcd38c411fa0981f26d59685944d691981b8ee035f8947d375d35acf205db5f45def01db3e962404532d18653072b342a57e4f7344ddc8e53fe6712026a3450ca895a74a072", 0x135, 0x0, &(0x7f0000000440)={0x2, 0x171, {0x0, 0xc, 0xfa, "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", 0x6a, "848f04406e366b12c1715d06d1943a076b8f7762af923e1714cfc054938cd543dbfcd4d28540f0cb60948571ecd3d7e61ff40c80d8680fe528637e076c6e4557250cc3bb15ea05ce461495c3f9c70b44295117f4dffc631ebf7af35dd0158a34c04d0979ea772fcc3f6c"}, 0xe6, "4f842834b7f711cbe2896c01572439d97f6539a4d7530427b754bf3d2070502b0faa0b114fe986a39728de1afaf55b07dcfee757183c25ac4752d017e0b16738ffabb3d9a3a0e39a7e77b21beae12e652c0eeeb5c3631cac7dbdf648005805c0c15eda12ba8ddab907c1359a91151d74a5d3a355f7fd4cf8fd4fb104fa38a4399e2d34ab6f92c2ab36d1693e2d30f18dbfce52e89eb5031f94761722d0facb6917adee036ca02f591ba906394b8683570f5287a860d4e8bc38402a5aa5f405b9e911c4327888eedaaee585cebc7e476ed42c190ab8a64814ac0d9267c91f97cbe4fac143be38"}, 0x263}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) 13:35:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 13:35:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) [ 3274.083176] loop3: detected capacity change from 0 to 40 [ 3274.087439] loop7: detected capacity change from 0 to 40 [ 3274.091897] loop2: detected capacity change from 0 to 40 [ 3274.101680] loop6: detected capacity change from 0 to 40 [ 3274.146412] loop1: detected capacity change from 0 to 40 [ 3274.149983] loop5: detected capacity change from 0 to 40 [ 3274.203584] FAULT_INJECTION: forcing a failure. [ 3274.203584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3274.204640] CPU: 0 PID: 13032 Comm: syz-executor.3 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3274.205191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.205733] Call Trace: [ 3274.205935] [ 3274.206105] dump_stack_lvl+0x8f/0xb7 [ 3274.206388] should_fail_ex.cold+0x5/0xa [ 3274.206686] prepare_alloc_pages+0x178/0x500 [ 3274.207005] __alloc_pages+0x149/0x500 [ 3274.207288] ? __pfx___alloc_pages+0x10/0x10 [ 3274.207595] ? __pfx___lock_acquire+0x10/0x10 [ 3274.207915] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3274.208250] alloc_pages+0x1a0/0x260 [ 3274.208525] filemap_alloc_folio+0x32a/0x410 [ 3274.208835] ? __filemap_get_folio+0x254/0xc90 [ 3274.209166] ? __pfx_lock_release+0x10/0x10 [ 3274.209470] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 3274.209814] ? xas_start+0x157/0x6a0 [ 3274.210098] ? xas_load+0x6a/0x140 [ 3274.210356] __filemap_get_folio+0x32c/0xc90 [ 3274.210671] ? __pfx___filemap_get_folio+0x10/0x10 [ 3274.211028] ? __mark_inode_dirty+0x68c/0xe70 [ 3274.211358] pagecache_get_page+0x2e/0x130 [ 3274.211667] ? __pfx_fat_get_block+0x10/0x10 [ 3274.211972] block_write_begin+0x35/0x450 [ 3274.212264] ? lock_release+0x3b6/0x750 [ 3274.212552] cont_write_begin+0x4fe/0x700 [ 3274.212849] ? __pfx_fat_get_block+0x10/0x10 [ 3274.213161] ? __pfx_cont_write_begin+0x10/0x10 [ 3274.213484] ? __mark_inode_dirty+0x68c/0xe70 [ 3274.213815] fat_write_begin+0x89/0x180 [ 3274.214108] ? __pfx_fat_get_block+0x10/0x10 [ 3274.214427] generic_perform_write+0x25a/0x580 [ 3274.214755] ? __pfx_generic_perform_write+0x10/0x10 [ 3274.215102] ? __pfx_fat_update_time+0x10/0x10 [ 3274.215421] ? __pfx_file_update_time+0x10/0x10 [ 3274.215755] ? generic_write_checks+0x2c0/0x400 [ 3274.216090] __generic_file_write_iter+0x308/0x4b0 [ 3274.216440] ? do_sendfile+0xb1d/0x1280 [ 3274.216741] ? __x64_sys_sendfile64+0x248/0x2a0 [ 3274.217098] generic_file_write_iter+0xe7/0x350 [ 3274.217453] do_iter_readv_writev+0x211/0x3c0 [ 3274.217805] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3274.218197] ? avc_policy_seqno+0xd/0x70 [ 3274.218504] ? security_file_permission+0xb5/0xe0 [ 3274.218873] do_iter_write+0x18b/0x700 [ 3274.219153] ? lock_is_held_type+0xdb/0x130 [ 3274.219484] vfs_iter_write+0x74/0xb0 [ 3274.219772] iter_file_splice_write+0x73e/0xcb0 [ 3274.220132] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.220519] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3274.220912] ? inode_security+0x105/0x140 [ 3274.221231] ? security_file_permission+0xb5/0xe0 [ 3274.221596] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.221966] direct_splice_actor+0x113/0x180 [ 3274.222298] splice_direct_to_actor+0x33a/0x8c0 [ 3274.222640] ? __pfx_direct_splice_actor+0x10/0x10 [ 3274.223009] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3274.223399] ? security_file_permission+0xb5/0xe0 [ 3274.223763] do_splice_direct+0x1bc/0x290 [ 3274.224073] ? __pfx_do_splice_direct+0x10/0x10 [ 3274.224429] ? lock_is_held_type+0xdb/0x130 [ 3274.224758] do_sendfile+0xb1d/0x1280 [ 3274.225059] ? __pfx_do_sendfile+0x10/0x10 [ 3274.225377] __x64_sys_sendfile64+0x248/0x2a0 [ 3274.225714] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3274.226059] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.226443] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.226813] do_syscall_64+0x3f/0x90 [ 3274.227101] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3274.227462] RIP: 0033:0x7f1cf7fb1b19 [ 3274.227735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3274.229008] RSP: 002b:00007f1cf5527188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3274.229567] RAX: ffffffffffffffda RBX: 00007f1cf80c4f60 RCX: 00007f1cf7fb1b19 [ 3274.230094] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3274.230609] RBP: 00007f1cf55271d0 R08: 0000000000000000 R09: 0000000000000000 [ 3274.231117] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3274.231635] R13: 00007fff1596d4df R14: 00007f1cf5527300 R15: 0000000000022000 [ 3274.232160] [ 3274.238923] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 3274.259216] FAULT_INJECTION: forcing a failure. [ 3274.259216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3274.260749] CPU: 0 PID: 13034 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3274.261305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.261872] Call Trace: [ 3274.262058] [ 3274.262226] dump_stack_lvl+0x8f/0xb7 [ 3274.262509] should_fail_ex.cold+0x5/0xa [ 3274.262812] prepare_alloc_pages+0x178/0x500 [ 3274.263136] __alloc_pages+0x149/0x500 [ 3274.263417] ? __pfx___alloc_pages+0x10/0x10 [ 3274.263732] ? __pfx___lock_acquire+0x10/0x10 [ 3274.264057] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3274.264410] alloc_pages+0x1a0/0x260 [ 3274.264675] filemap_alloc_folio+0x32a/0x410 [ 3274.264991] ? __filemap_get_folio+0x254/0xc90 [ 3274.265320] ? __pfx_lock_release+0x10/0x10 [ 3274.265628] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 3274.266007] ? xas_start+0x157/0x6a0 [ 3274.266274] ? xas_load+0x6a/0x140 [ 3274.266534] __filemap_get_folio+0x32c/0xc90 [ 3274.266855] ? __pfx___filemap_get_folio+0x10/0x10 [ 3274.267212] ? __mark_inode_dirty+0x68c/0xe70 [ 3274.267541] pagecache_get_page+0x2e/0x130 [ 3274.267847] ? __pfx_fat_get_block+0x10/0x10 [ 3274.268156] block_write_begin+0x35/0x450 [ 3274.268445] ? lock_release+0x3b6/0x750 [ 3274.268729] cont_write_begin+0x4fe/0x700 [ 3274.269027] ? __pfx_fat_get_block+0x10/0x10 [ 3274.269335] ? __pfx_cont_write_begin+0x10/0x10 [ 3274.269656] ? __mark_inode_dirty+0x68c/0xe70 [ 3274.270003] fat_write_begin+0x89/0x180 [ 3274.270283] ? __pfx_fat_get_block+0x10/0x10 [ 3274.270602] generic_perform_write+0x25a/0x580 [ 3274.270924] ? __pfx_generic_perform_write+0x10/0x10 [ 3274.271272] ? __pfx_fat_update_time+0x10/0x10 [ 3274.271597] ? __pfx_file_update_time+0x10/0x10 [ 3274.271951] ? generic_write_checks+0x2c0/0x400 [ 3274.272301] __generic_file_write_iter+0x308/0x4b0 [ 3274.272664] ? do_sendfile+0xb1d/0x1280 [ 3274.272966] ? __x64_sys_sendfile64+0x248/0x2a0 [ 3274.273312] generic_file_write_iter+0xe7/0x350 [ 3274.273648] do_iter_readv_writev+0x211/0x3c0 [ 3274.274001] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3274.274376] ? avc_policy_seqno+0xd/0x70 [ 3274.274684] ? security_file_permission+0xb5/0xe0 [ 3274.275047] do_iter_write+0x18b/0x700 [ 3274.275353] ? lock_is_held_type+0xdb/0x130 [ 3274.275684] vfs_iter_write+0x74/0xb0 [ 3274.275977] iter_file_splice_write+0x73e/0xcb0 [ 3274.276333] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.276705] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3274.277097] ? inode_security+0x105/0x140 [ 3274.277405] ? security_file_permission+0xb5/0xe0 [ 3274.277769] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.278149] direct_splice_actor+0x113/0x180 [ 3274.278475] splice_direct_to_actor+0x33a/0x8c0 [ 3274.278825] ? __pfx_direct_splice_actor+0x10/0x10 [ 3274.279185] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3274.279567] ? security_file_permission+0xb5/0xe0 [ 3274.279939] do_splice_direct+0x1bc/0x290 [ 3274.280246] ? __pfx_do_splice_direct+0x10/0x10 [ 3274.280605] ? lock_is_held_type+0xdb/0x130 [ 3274.280935] do_sendfile+0xb1d/0x1280 [ 3274.281237] ? __pfx_do_sendfile+0x10/0x10 [ 3274.281551] __x64_sys_sendfile64+0x248/0x2a0 [ 3274.281908] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3274.282272] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.282648] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.283039] do_syscall_64+0x3f/0x90 [ 3274.283323] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3274.283702] RIP: 0033:0x7f3fd70e5b19 [ 3274.283984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3274.285244] RSP: 002b:00007f3fd465b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3274.285793] RAX: ffffffffffffffda RBX: 00007f3fd71f8f60 RCX: 00007f3fd70e5b19 [ 3274.286304] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3274.286808] RBP: 00007f3fd465b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3274.287312] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3274.287829] R13: 00007ffe67db7a4f R14: 00007f3fd465b300 R15: 0000000000022000 [ 3274.288348] [ 3274.321210] bio_check_eod: 7 callbacks suppressed [ 3274.321238] syz-executor.4: attempt to access beyond end of device [ 3274.321238] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.324036] syz-executor.6: attempt to access beyond end of device [ 3274.324036] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.324368] buffer_io_error: 7 callbacks suppressed [ 3274.324407] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3274.324998] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3274.325620] syz-executor.7: attempt to access beyond end of device [ 3274.325620] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.328050] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3274.365292] FAT-fs (loop0): Unrecognized mount option "" or missing value 13:35:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendfile(r2, r1, 0x0, 0x7ff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x5, 0x1, 0xc0, 0x1f, 0x0, 0x9, 0x120, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x40, 0x68a, 0x1ff, 0x0, 0x4a, 0x415, 0x1, 0x0, 0xf6, 0x0, 0xb7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) 13:35:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) [ 3274.418674] syz-executor.5: attempt to access beyond end of device [ 3274.418674] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.419732] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:35:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) 13:35:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffd}, {0x0, 0x0, 0x2800}, {&(0x7f0000000180)="124cc7289324f900bb69c9df3a01ee0b6d576131ff4d1c672c9c9119d093881973eedd7861c798c57e661a4f319642dbed9c73a6a8966a7e30af9f867b05761f345367e6e560", 0x46, 0x20}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101042, 0x130) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400541, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3274.488070] loop7: detected capacity change from 0 to 40 [ 3274.504784] loop1: detected capacity change from 0 to 40 [ 3274.522603] loop6: detected capacity change from 0 to 40 [ 3274.574082] syz-executor.2: attempt to access beyond end of device [ 3274.574082] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.576054] Buffer I/O error on dev loop2, logical block 10, lost async page write 13:35:22 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3274.607264] syz-executor.3: attempt to access beyond end of device [ 3274.607264] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.609197] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3274.636266] FAULT_INJECTION: forcing a failure. [ 3274.636266] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.638298] CPU: 0 PID: 13052 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3274.639312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.640311] Call Trace: [ 3274.640645] [ 3274.640943] dump_stack_lvl+0x8f/0xb7 [ 3274.641470] should_fail_ex.cold+0x5/0xa [ 3274.642025] should_failslab+0x9/0x20 [ 3274.642525] __kmem_cache_alloc_node+0x5b/0x400 [ 3274.643126] ? iter_file_splice_write+0x169/0xcb0 [ 3274.643750] ? iter_file_splice_write+0x169/0xcb0 [ 3274.644362] __kmalloc+0x46/0xc0 [ 3274.644821] iter_file_splice_write+0x169/0xcb0 [ 3274.645422] ? generic_file_read_iter+0x330/0x550 [ 3274.646094] ? generic_file_splice_read+0x1bc/0x4d0 [ 3274.646729] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.647385] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3274.648059] ? inode_security+0x105/0x140 [ 3274.648626] ? security_file_permission+0xb5/0xe0 [ 3274.649252] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3274.649921] direct_splice_actor+0x113/0x180 [ 3274.650491] splice_direct_to_actor+0x33a/0x8c0 [ 3274.651096] ? __pfx_direct_splice_actor+0x10/0x10 [ 3274.651733] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3274.652398] ? security_file_permission+0xb5/0xe0 [ 3274.653049] do_splice_direct+0x1bc/0x290 [ 3274.653607] ? __pfx_do_splice_direct+0x10/0x10 [ 3274.654249] ? lock_is_held_type+0xdb/0x130 [ 3274.654841] do_sendfile+0xb1d/0x1280 [ 3274.655391] ? __pfx_do_sendfile+0x10/0x10 [ 3274.655991] __x64_sys_sendfile64+0x248/0x2a0 [ 3274.656594] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3274.657247] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.657956] ? syscall_enter_from_user_mode+0x21/0x50 [ 3274.658649] do_syscall_64+0x3f/0x90 [ 3274.659174] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3274.659863] RIP: 0033:0x7f1b54649b19 [ 3274.660356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3274.662648] RSP: 002b:00007f1b51bbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3274.663620] RAX: ffffffffffffffda RBX: 00007f1b5475cf60 RCX: 00007f1b54649b19 [ 3274.664522] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3274.665426] RBP: 00007f1b51bbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3274.666339] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3274.667248] R13: 00007ffd48af020f R14: 00007f1b51bbf300 R15: 0000000000022000 [ 3274.668191] [ 3274.670093] loop0: detected capacity change from 0 to 16383 [ 3274.673494] loop4: detected capacity change from 0 to 40 [ 3274.692660] FAT-fs (loop0): Unrecognized mount option "LÇ(“$ù" or missing value 13:35:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) 13:35:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) [ 3274.776916] syz-executor.1: attempt to access beyond end of device [ 3274.776916] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.778713] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3274.796543] loop5: detected capacity change from 0 to 40 [ 3274.802162] loop0: detected capacity change from 0 to 16383 [ 3274.806165] FAT-fs (loop0): Unrecognized mount option "LÇ(“$ù" or missing value [ 3274.844845] syz-executor.4: attempt to access beyond end of device [ 3274.844845] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.846700] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3274.891933] syz-executor.6: attempt to access beyond end of device [ 3274.891933] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3274.893786] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3274.910678] loop3: detected capacity change from 0 to 40 13:35:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 3274.964810] loop2: detected capacity change from 0 to 40 [ 3275.003301] syz-executor.5: attempt to access beyond end of device [ 3275.003301] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3275.005599] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3275.085637] loop7: detected capacity change from 0 to 40 13:35:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 13:35:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) 13:35:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) 13:35:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) connect(r0, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1}}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3291.093016] loop3: detected capacity change from 0 to 40 [ 3291.143891] loop6: detected capacity change from 0 to 40 13:35:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) 13:35:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="0134563fa40000001a000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) openat(r2, &(0x7f0000000240)='./file0\x00', 0x600083, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3291.166764] loop5: detected capacity change from 0 to 40 [ 3291.171024] loop1: detected capacity change from 0 to 40 [ 3291.177014] loop0: detected capacity change from 0 to 40 [ 3291.179920] loop2: detected capacity change from 0 to 40 [ 3291.183882] loop4: detected capacity change from 0 to 40 [ 3291.191313] loop7: detected capacity change from 0 to 40 [ 3291.242293] bio_check_eod: 3 callbacks suppressed [ 3291.242317] syz-executor.3: attempt to access beyond end of device [ 3291.242317] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.244771] buffer_io_error: 3 callbacks suppressed [ 3291.244791] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3291.366760] FAULT_INJECTION: forcing a failure. [ 3291.366760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3291.368675] CPU: 1 PID: 13095 Comm: syz-executor.7 Not tainted 6.1.0-rc7-next-20221130 #1 [ 3291.369696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3291.370740] Call Trace: [ 3291.371071] [ 3291.371391] dump_stack_lvl+0x8f/0xb7 [ 3291.371918] should_fail_ex.cold+0x5/0xa [ 3291.372463] prepare_alloc_pages+0x178/0x500 [ 3291.373043] __alloc_pages+0x149/0x500 [ 3291.373558] ? __pfx___alloc_pages+0x10/0x10 [ 3291.374138] ? __pfx___lock_acquire+0x10/0x10 [ 3291.374735] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3291.375352] alloc_pages+0x1a0/0x260 [ 3291.375848] filemap_alloc_folio+0x32a/0x410 [ 3291.376419] ? __filemap_get_folio+0x254/0xc90 [ 3291.377014] ? __pfx_lock_release+0x10/0x10 [ 3291.377580] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 3291.378214] ? xas_start+0x157/0x6a0 [ 3291.378708] ? xas_load+0x6a/0x140 [ 3291.379196] __filemap_get_folio+0x32c/0xc90 [ 3291.379784] ? __pfx___filemap_get_folio+0x10/0x10 [ 3291.380429] ? __mark_inode_dirty+0x68c/0xe70 [ 3291.381040] pagecache_get_page+0x2e/0x130 [ 3291.381611] ? __pfx_fat_get_block+0x10/0x10 [ 3291.382194] block_write_begin+0x35/0x450 [ 3291.382732] ? lock_release+0x3b6/0x750 [ 3291.383257] cont_write_begin+0x4fe/0x700 [ 3291.383822] ? __pfx_fat_get_block+0x10/0x10 [ 3291.384383] ? __pfx_cont_write_begin+0x10/0x10 [ 3291.384992] ? __mark_inode_dirty+0x68c/0xe70 [ 3291.385621] fat_write_begin+0x89/0x180 [ 3291.386156] ? __pfx_fat_get_block+0x10/0x10 [ 3291.386736] generic_perform_write+0x25a/0x580 [ 3291.387365] ? __pfx_generic_perform_write+0x10/0x10 [ 3291.388014] ? __pfx_fat_update_time+0x10/0x10 [ 3291.388635] ? __pfx_file_update_time+0x10/0x10 [ 3291.389257] ? generic_write_checks+0x2c0/0x400 [ 3291.389888] __generic_file_write_iter+0x308/0x4b0 [ 3291.390543] ? do_sendfile+0xb1d/0x1280 [ 3291.391084] ? __x64_sys_sendfile64+0x248/0x2a0 [ 3291.391718] generic_file_write_iter+0xe7/0x350 [ 3291.392340] do_iter_readv_writev+0x211/0x3c0 [ 3291.392951] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3291.393605] ? avc_policy_seqno+0xd/0x70 [ 3291.394176] ? security_file_permission+0xb5/0xe0 [ 3291.394829] do_iter_write+0x18b/0x700 [ 3291.395367] ? lock_is_held_type+0xdb/0x130 [ 3291.395943] vfs_iter_write+0x74/0xb0 [ 3291.396473] iter_file_splice_write+0x73e/0xcb0 [ 3291.397094] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3291.397773] ? __pfx_generic_file_splice_read+0x10/0x10 [ 3291.398480] ? inode_security+0x105/0x140 [ 3291.399055] ? security_file_permission+0xb5/0xe0 [ 3291.399678] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3291.400360] direct_splice_actor+0x113/0x180 [ 3291.400937] splice_direct_to_actor+0x33a/0x8c0 [ 3291.401557] ? __pfx_direct_splice_actor+0x10/0x10 [ 3291.402208] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3291.402888] ? security_file_permission+0xb5/0xe0 [ 3291.403521] do_splice_direct+0x1bc/0x290 [ 3291.404069] ? __pfx_do_splice_direct+0x10/0x10 [ 3291.404682] ? lock_is_held_type+0xdb/0x130 [ 3291.405266] do_sendfile+0xb1d/0x1280 [ 3291.405795] ? __pfx_do_sendfile+0x10/0x10 [ 3291.406417] __x64_sys_sendfile64+0x248/0x2a0 [ 3291.406995] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3291.407647] ? syscall_enter_from_user_mode+0x21/0x50 [ 3291.408338] ? syscall_enter_from_user_mode+0x21/0x50 [ 3291.409022] do_syscall_64+0x3f/0x90 [ 3291.409546] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3291.410229] RIP: 0033:0x7f1b54649b19 [ 3291.410725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3291.412930] RSP: 002b:00007f1b51bbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3291.413912] RAX: ffffffffffffffda RBX: 00007f1b5475cf60 RCX: 00007f1b54649b19 [ 3291.414800] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 3291.415678] RBP: 00007f1b51bbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3291.416558] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 3291.417441] R13: 00007ffd48af020f R14: 00007f1b51bbf300 R15: 0000000000022000 [ 3291.418369] 13:35:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) [ 3291.466843] syz-executor.6: attempt to access beyond end of device [ 3291.466843] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.468730] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3291.474242] syz-executor.5: attempt to access beyond end of device [ 3291.474242] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.476092] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3291.490140] syz-executor.1: attempt to access beyond end of device [ 3291.490140] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.492037] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3291.508209] syz-executor.4: attempt to access beyond end of device [ 3291.508209] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.509975] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3291.534000] syz-executor.7: attempt to access beyond end of device [ 3291.534000] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.535987] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3291.539236] syz-executor.2: attempt to access beyond end of device [ 3291.539236] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.540953] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3291.549753] syz-executor.0: attempt to access beyond end of device [ 3291.549753] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.551842] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:35:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:39 executing program 5: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x7, 0x0, '\x00', [{0xd6e1, 0x7, 0x4, 0x27d5, 0x9, 0x1}, {0x2, 0x1000, 0x2, 0xffffffffffff8000, 0x8, 0x1f}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) fgetxattr(r2, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f0000000580)=""/97, 0x61) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="df", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x68a, 0x0, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3291.762034] loop5: detected capacity change from 0 to 40 [ 3291.780027] loop6: detected capacity change from 0 to 40 [ 3291.871105] syz-executor.5: attempt to access beyond end of device [ 3291.871105] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.872871] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3291.899082] syz-executor.6: attempt to access beyond end of device [ 3291.899082] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3291.900520] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) 13:35:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x11) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a00)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3304.901890] loop6: detected capacity change from 0 to 40 [ 3304.908055] loop0: detected capacity change from 0 to 40 [ 3304.910557] loop5: detected capacity change from 0 to 40 [ 3304.912128] loop2: detected capacity change from 0 to 40 [ 3304.913373] loop7: detected capacity change from 0 to 40 [ 3304.915032] loop1: detected capacity change from 0 to 40 r2 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x8, 0xa, &(0x7f0000000840)=[{&(0x7f0000000340)="b02ee336c72f8cce7f8b0c6d2f26594a15cf1d2e3746faabb2f3060d2e9db4c1a26dc12f456778316ca1848d404efb5e25b624f34ecb5096669df027ac73a542e9abb8f88f8dbacc6ba2c2276390bad19b6de22a90aaf9a560af7ef77282524c94acf76a9ecfa15629bbe740a3db8ba289287cff2dc5ba30a53def902374be767f9de96372b39435de818a7ff2c6cb120f6eae17e3b6f85ca7f02dca917f93a382b523846032b4b9014386b17fa73cb80e156f0178c9d90470fd5acbb6b31543d9ad60810465b01ae8e307f83f23a5b8efe7ca3300ab09e0ab306392a9266f7137be38dbb2dfbf", 0xe7, 0x80000001}, {&(0x7f0000000440)="fb218eeafd53a81e57297cb85420ad82834fbf96094058c604c7e19bcf41ad65dae557ce5199a2de25d36a8a25f27e5bc4a0bed85c11ebdc16719666148f897ef74fa8ce1bc460", 0x47, 0x800}, {&(0x7f00000004c0)="d649813633aec5cff1020029d3b57a2229f37469311c4dd04eb9286f29c96cdce622dd6528b381ee4736c1bc88bad9781cc4d443446c53846654db9b43146a544b03c17f9d4cf4979287a0e596ae6ebe289ca5b6361370a0e3", 0x59, 0x5}, {&(0x7f0000000540)="43fbc466af708fbc40621dcd35eebf269a8ec2a928e61d35bc19befd971354f5587b14703c344cb61d91a82aa0d1f59c95a050100d97a7fc76eded52c315fafa43ad03a10a1dbd8199c3c7439da78521d1c6ce9a0e81435452fc61725c7b76cc742edaf7c3bfa84e822a12182a10977bb88d12a5a1e16566f83a43119a322fa5f23446c0efe51bbc", 0x88, 0x2}, {&(0x7f0000000600)="c6018a1f67472e738404f648f8", 0xd, 0x7}, {&(0x7f0000000f40)="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", 0x1000, 0x3ce4000000}, {&(0x7f0000001f40)="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", 0x1000, 0x1}, {&(0x7f0000000640)="162336c3f01f7580abdd48d5187315e62265ca50da92b9c75b4ddb5eca59dee4992b28564fc68dc35a507316a087effd96f1c20bd38a17c49408719c5ad2bf8254c4ec52b6141ee27c97613212e0e25210a6f4eee2633c289b51deac07f97219cb23133e1471472b9d39b928bfdb98c604cf52a697e7befee04003769f", 0x7d, 0xc97a}, {&(0x7f00000006c0)="8452d616397d612a1e3ccbbab0b3fd182b13e7a2adb9d2e647e17a2b60359eca5ae08bdeaf2ca3e7e7eaf6779ef4082e89daa60349597eefa510f0745e0bed783d908bef43ed07076e09ffcdc43343cbfd178b5b0fd160e883e559ce7ceccc996ea5592c490e1e115cf80ac40b1b6ac24cf227800f51fbd6a953dc455878e85019c817866fdb347d9f47d5027c9d0631dc5adc1d13f8dc5fae3b6346e53359d852c6e02f53e9cb2888695acd231d01d6f9199bb672399cf8bbbb0c0d52e18ca0b45a30151c92e2796b98723042692bbf5c00b0ea98ca84f5757f", 0xda, 0x10001}, {&(0x7f00000007c0)="b1709429c72a5a475bcb77219c53f3189678b9d936c4f270ee4786f8c7994f5488b0804a979eac237d12e9ca273bc59424e648351222f51fe0431f27b4e828d0cf", 0x41, 0x1}], 0x8008, &(0x7f0000000940)={[{@check_strict}, {@map_off}, {@map_normal}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '(^'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@seclabel}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', r2) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) 13:35:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) 13:35:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x321000, 0x40) 13:35:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="f93860706f6654d3ce8a0edcd787cd342f4e281bf1a17e663500c6d0c84f02692a8ce177fbfc7d0bc268c7f5ece05aef8edf05940ff9e78e110f6505558d1e79feb329b8312c29f3ba601fa8c39c2ce45824a117ee8fb0fa78770783f8bc1058cba1b85708dfdaa75f77f56282108435d51520542fe27d64f5334af97225a4222600bfe49a8d444f5fba20", @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3304.939407] loop4: detected capacity change from 0 to 40 [ 3304.951869] loop3: detected capacity change from 0 to 40 [ 3304.978816] syz-executor.0: attempt to access beyond end of device [ 3304.978816] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3304.979676] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3305.033022] syz-executor.1: attempt to access beyond end of device [ 3305.033022] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.034147] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3305.035291] syz-executor.5: attempt to access beyond end of device [ 3305.035291] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.036563] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3305.038201] syz-executor.2: attempt to access beyond end of device [ 3305.038201] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.039286] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3305.041936] syz-executor.6: attempt to access beyond end of device [ 3305.041936] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.042994] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3305.127971] syz-executor.4: attempt to access beyond end of device [ 3305.127971] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.129199] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x26) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) 13:35:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x1, r5, 0x3, 0x80000}) 13:35:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xc200, 0x40) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="00b8e9d70000adb0a7620c0a4f79c2f353b19721593a7cedc60ab91e68b66f2787fe44785f", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000240)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3305.207977] loop6: detected capacity change from 0 to 40 [ 3305.209111] loop5: detected capacity change from 0 to 40 [ 3305.216932] syz-executor.3: attempt to access beyond end of device [ 3305.216932] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.219075] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:35:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) [ 3305.226550] loop0: detected capacity change from 0 to 40 [ 3305.241303] syz-executor.7: attempt to access beyond end of device [ 3305.241303] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.243499] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3305.293208] loop1: detected capacity change from 0 to 40 [ 3305.294709] loop2: detected capacity change from 0 to 40 [ 3305.308268] syz-executor.5: attempt to access beyond end of device [ 3305.308268] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.309595] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3305.320849] syz-executor.6: attempt to access beyond end of device [ 3305.320849] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3305.321952] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000300)="6e8edc6f6afa8003e2545e37cb28cacbdb2779a66504c395cba9345523eb2473211f6d0f0faec8bc2902ddfba8c3edb17950f9283be76e3c02c237b0798469680b0b59fa1d35d2df5c8edea67b2f0d002b049964c0efa4d5bed5cd7f611b039d24d1fe71adcfd32fb8b7038cdf9dd0f2a08193b6880d92c1c79d521e382fe9e030503880eae35beaa9b1466ed3dd8dd8c47c5ac2078828f9fe592cd0e789d19f66869cff2fdb7ad80b54bc5a1ebdb1343739cd729a872d4b05c801ccb176a96f23a2fbc21c273d04288ae7c4a6cff786146fb322a11ff053a2fcc0eeb43e864907f08138", 0xe4) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xd6, 0x5, 0x40, 0x2, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xe5b, 0x1, @perf_config_ext={0x1, 0x3}, 0x313, 0x0, 0xff, 0x6, 0x5, 0x9, 0x6, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 3305.372804] loop4: detected capacity change from 0 to 40 13:35:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) [ 3305.480431] loop3: detected capacity change from 0 to 40 [ 3305.487207] loop6: detected capacity change from 0 to 40 [ 3305.526604] loop7: detected capacity change from 0 to 40 13:36:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) 13:36:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) 13:36:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400, 0x9) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) r3 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa557, 0x7, 0x8000000000008001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000500)={{}, r4, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000f40)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000300)={0x0, 0x4, 0x7, 0x881e, {0x4, 0x7, 0x80000000, 0x1}, [0xe0b, 0x1, 0x7, 0x4]}}, @subvolid=0x4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) 13:36:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x4, 0x9}, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3317.794275] loop3: detected capacity change from 0 to 40 [ 3317.798755] loop0: detected capacity change from 0 to 40 [ 3317.800494] loop6: detected capacity change from 0 to 40 [ 3317.801625] loop5: detected capacity change from 0 to 40 [ 3317.805297] loop7: detected capacity change from 0 to 40 [ 3317.812259] loop1: detected capacity change from 0 to 40 [ 3317.860754] loop2: detected capacity change from 0 to 40 [ 3317.869936] loop4: detected capacity change from 0 to 40 [ 3317.935709] bio_check_eod: 9 callbacks suppressed [ 3317.935722] syz-executor.1: attempt to access beyond end of device [ 3317.935722] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3317.937223] buffer_io_error: 9 callbacks suppressed [ 3317.937234] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3317.965912] syz-executor.5: attempt to access beyond end of device [ 3317.965912] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3317.967117] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3318.007784] syz-executor.6: attempt to access beyond end of device [ 3318.007784] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.009820] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3318.076221] syz-executor.4: attempt to access beyond end of device [ 3318.076221] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.078367] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:36:05 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018080000c5c33b318e271b437ce6709eba409330d6e2c377f5bcea7af465804fb6680b5668acd91475077e3ef5f2ea73240f2b09a9f35bb21d09d906ae3ead05ce191fada2a522e5ce91607704edc6bdcb3d319a8c2299d5672b58afbeb44b71f06a3c5798c79536", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x100000000}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@cache_loose}]}}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:36:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) [ 3318.152734] syz-executor.0: attempt to access beyond end of device [ 3318.152734] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.153896] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3318.178147] syz-executor.2: attempt to access beyond end of device [ 3318.178147] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.179283] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3318.216312] syz-executor.7: attempt to access beyond end of device [ 3318.216312] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.217291] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3318.222299] loop1: detected capacity change from 0 to 40 [ 3318.232104] loop4: detected capacity change from 0 to 40 [ 3318.259816] loop6: detected capacity change from 0 to 40 13:36:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) [ 3318.316433] loop5: detected capacity change from 0 to 40 13:36:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) [ 3318.395182] syz-executor.6: attempt to access beyond end of device [ 3318.395182] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.397704] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="601c6d6b646f7366513c5254937623ca0440004407f62000f801", 0x1a}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x48, 0x7f, 0x6, 0x42, @empty, @loopback, 0x7800, 0x40, 0xc73, 0x5e}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@private2, @remote, @private0, 0xd4c5, 0x0, 0x101, 0x400, 0x2, 0x840000, r1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="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"]) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x9, 0xbf, 0x100, 0x3, 0x10}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) fcntl$setsig(r3, 0xa, 0x23) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@rand_addr=0x64010101, 0x4e21, 0x0, 0x4e20, 0x80, 0xa, 0x0, 0x40, 0x152}, {0x81, 0x8000, 0x9, 0xffffffffffff0000, 0xf0, 0x5, 0x0, 0x4748}, {0xc, 0x9, 0x0, 0x7f}, 0x5, 0x6e6bb7, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d6, 0x2b}, 0x2, @in=@rand_addr=0x64010101, 0x3501, 0x2, 0x1, 0x46, 0x9, 0x200, 0xe5}}, 0xe8) [ 3318.482082] loop2: detected capacity change from 0 to 40 [ 3318.502872] syz-executor.4: attempt to access beyond end of device [ 3318.502872] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.504760] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3318.555138] syz-executor.1: attempt to access beyond end of device [ 3318.555138] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3318.557765] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3318.635216] loop7: detected capacity change from 0 to 40 [ 3319.342151] loop0: detected capacity change from 0 to 40 [ 3319.346016] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value 13:36:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) [ 3331.917585] loop2: detected capacity change from 0 to 40 [ 3331.928588] loop4: detected capacity change from 0 to 40 13:36:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68) 13:36:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000500)=0x3, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000400)=""/248, 0xf8}], 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="e203f6a088eb56d57a349ab141924ee2727d5870bb0b61b3778e4330b25be5c4a4a59acae2f328330e20509bc6e2d141d601bfed2e983fbb71d36b61e8440b2e77fa24ebcc27038c1e08d60910069e5711cb5a549442e5c90f0f27e7248b634cd635960e66215f99e73d2ec87ce3207c37e3843460d33683b4dc99e636dfa605a3e27f4545ffd389b9934711249a94f7622dcf255527efcf7e9164652462093a0921606c1b6602b9147a5729eb2974c922a236d404cdc5a3d4ab414a3d3b", @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) [ 3331.935770] loop0: detected capacity change from 0 to 40 13:36:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x111042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) pread64(r2, &(0x7f0000000300)=""/168, 0xa8, 0x1) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {0x8}, 0x5}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x100, 0x0, &(0x7f0000000380), 0x20000, &(0x7f00000003c0)={[{@fat=@errors_continue}, {@dots}, {@fat=@flush}, {@nodots}, {@dots}], [{@obj_user={'obj_user', 0x3d, 'ip6gre0\x00'}}, {@hash}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x680000, 0xca) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x2, 0xa0) 13:36:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'mountinfo\x00'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, 'mountinfo\x00'}, {0x20, 'mountinfo\x00'}, {0x20, ':G-+,'}, {}, {0x20, 'vfat\x00'}, {0x20, 'mountinfo\x00'}], 0xa, "97c55a30d096ae84534abf83f71f5800d45d42819d828b3aadd844105d85a4f93d"}, 0x71) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) acct(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3331.958616] loop6: detected capacity change from 0 to 40 [ 3331.963507] loop7: detected capacity change from 0 to 40 [ 3331.988649] loop3: detected capacity change from 0 to 40 [ 3331.997385] loop1: detected capacity change from 0 to 40 [ 3332.044616] bio_check_eod: 5 callbacks suppressed [ 3332.044645] syz-executor.6: attempt to access beyond end of device [ 3332.044645] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.046161] buffer_io_error: 5 callbacks suppressed [ 3332.046172] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3332.058913] syz-executor.7: attempt to access beyond end of device [ 3332.058913] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.059961] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3332.072104] loop5: detected capacity change from 0 to 40 13:36:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) 13:36:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3332.137813] syz-executor.4: attempt to access beyond end of device [ 3332.137813] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.139858] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3332.169629] syz-executor.0: attempt to access beyond end of device [ 3332.169629] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.170727] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3332.196604] syz-executor.3: attempt to access beyond end of device [ 3332.196604] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.197786] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3332.204874] loop6: detected capacity change from 0 to 40 [ 3332.216663] loop7: detected capacity change from 0 to 40 [ 3332.229985] syz-executor.2: attempt to access beyond end of device [ 3332.229985] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.232665] Buffer I/O error on dev loop2, logical block 10, lost async page write 13:36:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69) 13:36:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x6}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3332.324506] syz-executor.5: attempt to access beyond end of device [ 3332.324506] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.326590] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3332.351014] syz-executor.6: attempt to access beyond end of device [ 3332.351014] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.352097] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) [ 3332.378923] syz-executor.7: attempt to access beyond end of device [ 3332.378923] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.380017] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:36:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x12, 0x7, 0x1, 0x61, @mcast2, @mcast2, 0x700, 0x7800, 0x100, 0x81}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f00000001c0)='./file0\x00') renameat(r2, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000180)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x4, 0xc976, 0x7b5f90bf5ea5a6e6, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x8, 0xfe0, 0x6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 13:36:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000240), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 3332.397140] loop1: detected capacity change from 0 to 40 [ 3332.411237] loop4: detected capacity change from 0 to 40 [ 3332.412262] syz-executor.5: attempt to access beyond end of device [ 3332.412262] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3332.413961] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3332.415686] loop0: detected capacity change from 0 to 40 13:36:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c6530"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3332.450635] loop3: detected capacity change from 0 to 40 13:36:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) [ 3332.511474] loop6: detected capacity change from 0 to 40 [ 3332.542613] loop7: detected capacity change from 0 to 40 13:36:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="dcfb01de000000002eaba0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3332.675659] loop5: detected capacity change from 0 to 40 13:36:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0xea201, 0x78) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000040)='\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='ramfs\x00', 0x0) r2 = openat(r1, &(0x7f0000000bc0)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="70738950c2799a0bcc48dacac202b4ae1171d095fb91d591e591e7147f9071ad70268455167c9f7ac173b9f146fb85ff13a089093c14c5701baab469a0e04e"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)={{0x107, 0x44, 0x0, 0x24c, 0x26c, 0x0, 0x16c, 0xff}, "98e5a96e31a21a3826fe8fd46ab35424221f4018c02ad9deeca4b998bbad83cbf17a9f803a661003be43acaa7c18e672e1038be2ac4c1e3e06995d050b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x85d) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) 13:36:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f00000007c0)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000440)="d1f0963552676e99299c49b77447822a7b9d598557de1d800ebdb657b8efea3bcf618eb239f965a941287d30605265c39f38b9f28e123cdf57c532303bee2bdb51def55dab55716e1933a53b11418c5534d055ddd7e8852fad2d157d3d07fa7170202fccfabf09898b065ee73d59d8e95fb72206ab9bfbd4bd692b3d92aa2420175e2c43a39876e2d355871b63d34f5a2eada3280b8a1cac425df8b8578e3094312d8379cb408c0e96d860541f621b447aaf8bb340122e739b8cb9644336821e3333f96cc714a71f", 0xc8, 0x7f}, {&(0x7f0000000540)="5c04235295e8c2efc4881d7652629595381997cca291c924d7d3c39a6592e1b281531197c2a0da05125ee8b8ad6c808e2608610ff1d36a2b3a8f122c04d11168ac4db12f5d8f711fd5763611c48413cfec017c16cbd47c9b8c4c7ec1f0c86a3a22f071b50bdf2e018e86a39ed6c1d2a9cbf4b2b71917d8304026b3bd4dd6eecc4504fbb383c9aa70faad7079b8e8a395", 0x90, 0x8}, {&(0x7f0000000600)="c70a863248f6fc4833f71821b85b068f981c882ec7c771cfd9c28af1c12193bf0ef68bc302eddbf5b6c6e2808d631c6d022c555b78a654ecddb9e751014f9a7931e75736952d16149625483882a8c97989bc69eee871be597aadcc9017ed920c44a90afde5aaec5b245349dc9768f19860c218c80182ed63b2a5fd7f34efb6a37c92737bf1506e18c98a9f3f8b6b8498463043c30631397d175f8b82fa45af81e7a7b3f6ddca5535ecac6ecb8f91e25f4f0e30040d39de77e6d9b691", 0xbc, 0x6}, {&(0x7f00000006c0)="772fdc7349980d0c027ebcaa18fae7f96471aad843e9b0eb53c9a7894d44b36739827ba267095549c6fac93cf973c9975e4ffc15a8df627a5763211df346b9b222b7fbe36341ee77c79a046f3b797e613f223331cbaac1aa521a1e0447b7164de8812c8b100792b51904fe00eb854026c6b12ec82dd4ac238ed5ffd135a0a767669c05fb89bc3396bf39867e47a74765953d8f9e8735c5f143f78c32547fe7a3a748c05b1d119cb4772c13c14f7670e69da80acb04b95197ec750e4ac5ede7de7c9b50dd1b1156cd0809519cf801754bcb0921e49f454c036b80177a1b71a78562252276", 0xe4, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000afc5853e1f0101"]) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='mountinfo\x00', &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x40010, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0xa6, 0x3}, &(0x7f0000000880)='./file0\x00', 0x18, 0x0, 0x12345}, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000300)=""/220, &(0x7f0000000400)=0xdc) sendfile(r1, r0, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xd8000, 0x22) 13:36:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c6530"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3346.987088] loop4: detected capacity change from 0 to 40 13:36:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x141c02, 0x35) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000300)={'netdevsim0\x00'}) sendfile(r2, r0, 0x0, 0xfffffdef) 13:36:34 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x64, &(0x7f0000000200)=[{&(0x7f00000001c0)="601c6d6b646f7366d8a02b00080101000440002000f801", 0xffeb}, {0x0, 0x0, 0x2800}], 0x90004, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x8, 0x2, 0x20, @remote, @private1={0xfc, 0x1, '\x00', 0x3}, 0x7, 0x7800, 0xfffffff7, 0x7}}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'osx.', 'mountinfo\x00'}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) mknodat$null(r4, &(0x7f0000000440)='./file1\x00', 0x2, 0x103) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 13:36:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) 13:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70) [ 3347.001745] loop5: detected capacity change from 0 to 40 [ 3347.004432] FAT-fs (loop5): invalid media value (0xd8) [ 3347.004952] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3347.012594] loop2: detected capacity change from 0 to 40 [ 3347.015801] loop0: detected capacity change from 0 to 40 [ 3347.018598] loop7: detected capacity change from 0 to 40 [ 3347.052129] loop6: detected capacity change from 0 to 40 [ 3347.057815] loop1: detected capacity change from 0 to 127 [ 3347.074260] loop1: detected capacity change from 0 to 264192 [ 3347.123338] loop3: detected capacity change from 0 to 40 13:36:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8001, 0x5, 0x1}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3347.187880] bio_check_eod: 9 callbacks suppressed [ 3347.187896] syz-executor.7: attempt to access beyond end of device [ 3347.187896] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.189552] buffer_io_error: 9 callbacks suppressed [ 3347.189563] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3347.206885] syz-executor.2: attempt to access beyond end of device [ 3347.206885] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.208962] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3347.211061] syz-executor.4: attempt to access beyond end of device [ 3347.211061] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.213089] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3347.265714] syz-executor.3: attempt to access beyond end of device [ 3347.265714] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.266922] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71) 13:36:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68) [ 3347.347836] syz-executor.6: attempt to access beyond end of device [ 3347.347836] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.349888] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000040)='./file0\x00', 0xa02, 0x170) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3347.374403] loop0: detected capacity change from 0 to 40 [ 3347.435150] loop7: detected capacity change from 0 to 40 13:36:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r1, 0x0, &(0x7f0000000300)="0cf523ce24330ba4e334d6dca279319874854767155dbe504aa96b68bca8bac82a455f410405a557bf5f903e62bf0692127270cca9e782749c6d1ce23b245cc3f38933328951bce4634d6efe04c6877f811096b5cbdbeebf9e77f399523901ecbc7f4ea175ec2d5f9c6f2c82870d588421065c02da4ac2152db5bc5836559b1473f767073f675cd9e7bfb28857cd2baa99d046b140ff0292af7b40b340a5f24acb122bc39aadd56b8fb3e8c50666d9b62b914a1a", 0xb4, 0x40000160, 0x1, {0x0, r3}}, 0x1f) [ 3347.474856] loop1: detected capacity change from 0 to 40 [ 3347.496868] loop4: detected capacity change from 0 to 40 13:36:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f00000001c0)='./file0\x00') renameat(r4, &(0x7f0000000140)='./file0/file0\x00', r4, &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3347.534623] loop2: detected capacity change from 0 to 40 [ 3347.554313] loop3: detected capacity change from 0 to 40 13:36:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c6530"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3347.595745] syz-executor.0: attempt to access beyond end of device [ 3347.595745] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.596984] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3347.613911] loop6: detected capacity change from 0 to 40 [ 3347.653263] syz-executor.3: attempt to access beyond end of device [ 3347.653263] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.654186] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3347.658360] syz-executor.0: attempt to access beyond end of device [ 3347.658360] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.659474] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3347.670999] syz-executor.1: attempt to access beyond end of device [ 3347.670999] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.672066] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3347.711844] syz-executor.7: attempt to access beyond end of device [ 3347.711844] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3347.713071] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3347.831798] loop5: detected capacity change from 0 to 40 [ 3347.837250] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 13:36:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:36:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8c) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3347.881001] loop3: detected capacity change from 0 to 40 [ 3347.885891] loop1: detected capacity change from 0 to 40 13:36:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69) 13:36:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72) 13:36:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101742, 0x40) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x340, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01070000000000002e99a02f4e3e29e5b7cc95cc0000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:36:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f6669"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/241, 0xf1}], 0x1, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000002) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000004c0)={{0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'lblc\x00', 0x6, 0x7, 0x10}, {@broadcast, 0x4e22, 0x10000, 0x9, 0x1ff, 0x81}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000c62c00000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18ca, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') openat(r3, &(0x7f0000000180)='./file1\x00', 0x650102, 0x49) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7f, 0x5, &(0x7f0000000580)=[{&(0x7f00000004c0)="603c6d6ba302e189eb42c6610101000440002000d801000a66c70aabad4e7e7bb2979f1583c64394e14686f71403db69cb21d088a472d90900000000000000033963dcd0e90ba611c77c4747492d03c2e3ad8099f77443f4318401dd6e4c87660764ed99d7ab5871ce5c4abdc26c2b5208384b8e71c50eb54894ebac8aa0538992cf4bff4c6ba85125", 0x89}, {0x0, 0x0, 0x6}, {&(0x7f0000000340)="2431963a9dba26426fc5e2bd60c7f3a69ea97fb4b4994942e6431472d10511134a7d4c9bbbad4c2cabbd8132044b710cc08cf5decb8e6e0524ad0d4aeb8dd7a948f3c0de5c2bbc0b7a96fa6a02161f59c972acb62791c13e50bc4070ce2bb41a1461c97a5fc120c71a4a207479fdb5fbcb3a8552c02235c3486b35b7020f08df96cee3ae6347dc467a6092f19c3a41eefb8826c9e352331acab8aa30bfb8d1cf98398596402ac83f6dbb71fd75fad97e62f5236f636320", 0xb7, 0xba}, {&(0x7f0000000400)="1be2341fd0190302affc2938090c55341058f288cbc302793847a6d3dcbeaa3862f6a3f7620e582e70171a65837ba603f6bd55ca8d1312e5c3bac86c5471d566d2b405b6ed8b49ffd31b69812bef7d671fba4bff1d4cccf0601496c55b921e21881cec4f2f22a1c5c6130c6a22625d61ec34de41801bbfdf51a3e1091be77b8762ee0bceee1a86b6fb6e06ee2a225461d965214388b20aa6e61111a312ff65756ffd20b9f67c99bb7639a000b332cafaae7155", 0xb3, 0x7ff}, {&(0x7f0000000600)="24c375e79080f8f8013f408b8dbfca9a241456fde3100096fcbdb59406c3f896efca7800d478c1c8537e8fbfdc9c7c9d0bfa001e6a8c8b3fb339ca98259f3e8e0a73f7b06843b170989224e3bb7f5d27f602a5c6541f23e8d0d2cbdcdd2a521da243b84766993683ae626791a38ee6b8bd976a072ef424a357498e4f5b690a0c97fe7f1a7deb9cb70ebf6e238cbaff1a5d1d3fd85689007c0bab86464eee694e7d3a0b19dc414ec82245a086b5da3dc4a5a3186fa5", 0xb5, 0x7}], 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRES16, @ANYRES32=r0, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC=r0]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xf9, 0x1, 0x81, 0x3, 0x0, 0x0, 0x40, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x4}, 0x8, 0x401, 0x7fffffff, 0x1, 0x6, 0x3, 0x80, 0x0, 0xa0000000, 0x0, 0xc1}, 0x0, 0x5, r4, 0x8) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfc, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r4, &(0x7f0000002f40)=ANY=[@ANYBLOB="0b01063f4f0100006400000002000000d20200000600000000000000000000006459806f6d0a59d95d23985da2992445297139c782dcd749f51f75392121c896dd029886f73c2aad9b52c5ea5d5157d4cc59eeee219caa00145269a1909512f580d491e126069b0819b74d484effaf588f83bce2fc5b706e8e7a7fa1471846437e93064f33aa3b15b7a15f52afd87fbe35f9de90ea432722afa987c43096a42fe10efb9b247dac15d18e1d4d8d578e7ae27edf5a520ce5f00656685a87fd2c1d5f8bb95643843e765f180061250347e73d4b3e33a0fdbb6618352a0bdb0b8993cd4818d55d4725d65ab8302dafdb51c3ec2e20191c342fbcbc36f71aa783206032c6b0cb7cff9c1f47b9a6de18f95bed37672c6c3cbed80e9a33b16d89b1993286ccae4fbd31d8239a0a2fee9c655d06b238447b538b5892f6722c8e488b6a57f0c572286b766877e7671744cb73005e083317e97ed779a8b9a5e9dddaa6f6a2847379beaecf294b12b238910298de3b05c2c98ecc0d1d024a350523a2d0b6b32a700ed1e7a2574fe9e5c587dd76958f151f3ce53f6ae36338f28da8cf8a6f1b5627cee80587b1b34f263df3e32baac68b80ce83f5362614550ce7f517b8d17a051c64c0d577b75477369b2ca4531a0a991b75e52ad49a7b3d099955928eea9d921c49c39c9aaf697011b4f497fe4887b72695e276c48101f100d68739661301840cb967f8d094873b4f3a34cadc82ea56c60e3aab3bd60f316374807b7bf26836f4629fac0770918954444dfb7e33986422a068b9e144cee7fc4ad17d2d8ba9df19d45068b8521e73b1fd161804a9305fae2793809167735cf7096dbfa3665a821681b600abf1e6cece4c6e11edc9b24d2ae2f016080ea2b7828323fb650f42948532379926e77a25e293a7bcc616df25633791aebeeb4d6f5f1ee7a8a50d7291ada5332169177fb6feddebfa275f3b744515f085b087c605b8c7cd89f6212a9b1c61f489913e3fcba25535f4c71060fdc1ff611c46e545cff7d7e345eb96989e9f6ba88f65e9521c9d5c492d114c1f9670ac3407c4bd5e13f7d5e58b3b2d2a96b2c1ba6022da52900e4d64dec7e1f67f63660b74ddc19adea3aac231f6f9e176101d52bee9b2352731c59984c2622fb37427029c676d89c6b3601f59851100e17cf7fdafdfb79f87172afaaccff078d8ff32f18597750e556acca4993965dcf61079a4931db0af2c03d522661b919ec1af82bd74d9ba8c1a803cd61fab20507ffb79a022ef2ba9ade6712089596bc17ad90185c3f1b8dded5270db33271d07a5978ca2081736d3b486a4e95aa80315a5a997230b9b12d025a0dbb791f1c9e4afee04c4bfaffb9a783e49c966673226ed64ab2e02a6938875d1c5f706aa7a3bd00c92e6037496cf2a957eb559da7aabb7da84aa1373c92145aa462cd49c2da3466559b1bbb8770c8550ebb9113502b9aa6435b7f187372f5e7704651caf42e612e4243c832b3239d179cf4e154c0192fcecf548265964ef3fc18657286e5ff44bfd38c49d4cd1de9a7aa8f71ea10cc927775f6ec231e0a99f5d9f6460c0d0758491672bc2191fb05e909f96811b23bca2054a24df692de212a083509d5983c792234e2fc5e56a43e15ecd3754534484721f63338167bd12a6f7b7ee4d14024ada4e2a693e15102c8fea6889e0dd577db5cc2b0d346f8a92cabef4638dc102862c275f97cffd82e19f710feda55ba3170f92df1accce51b21cfb61452e75aac7ab1f9c4454e921b96a087982bd1d8a9f9f079e40a4eec1062f487c265b674d0c595d0ea6142af280202295405334d8a2e85c56de62437e7dc44c1e75b032609dd60c59be482fc703d2b3adf92c2d103fa71145418369700130a95c143aabe49f32679585ae10ab808c9b0bb469758ef665f8323f885aaae4d6705f34334bcca27be932c0909d8370b7edc17e2b42b650d8eb9ddb0983b4fd540852d08d7afd99ccc057080e929f5414d83a0712ff89373cba26eb97336e31f7417e27bc665325006a1d13123806442ad0f164bd3e8cdb4a0d3faf00b32465975b8f01c246b94e8d2e70bf2be41eb795a0e05a7e1e5fc336afe4d4708a899c61db472f98c5ab231288320109f778fe998e1bea9e9a3724a0aca560350dc60e0bdbe3aca9db252f372caaa658dac1768dd332d7cf5e7cf2b5f080194126fb1721fbda27311d188790ec20168d5dddf6bb0e1685dde2584d02813a5b65dcb83cd498aab4a3a669e04c3af748b51a399a96ae5eb6efb4579c7ab612a8f87831f02bd3c7df509618d55bbeaaedf700673035c229706935057607b0a02347c8cde1e8bc52de2e6e28c934fd2720063bbc85762357681d8e0df986d535747ec437681108aba0389cc9c92f7b9d5fd8e044f3e1a6a2c93452248eb3106cb13801c9206382f536f2101de6025c54d753502858c6315719f07db402e6f2e785deaab9dbcd6afb2f139c82dc4a1e4376bcb369c70a1ef6517c69ffa1e51273cb16e375453955f87365c4890158dafc633ade15e26c8b348137c098d1e5a91a14875016c4079b8930e97f82d534271a6f07ede5df10faf11d5345fa87a9036d9ec68f44869623454e1a68d22e4508e8ea7b9c36772068e313d5b91d3cc0b0f9885d26d3eaf85213c0131b1328380132b29d0c31757d2c7c5437d9a2cad2db83606fe9530ecc9f9495b57e0b3eaed0db793fab89763cec2ed3389113012e3f611b47b78e0ef30e7a224f99d8056859cd67b4071fe24de7780bd46ce8956cab64cf1f697dc863999363476094dade8cfb0a8d42857e1db78b48077f8b1a80cf1cace061e2c8addb0a9221037d3d3a22ac0d7076dd270cc5ac7a56d003d5024a88608aceec6f0b35efe8b63aa78b7c2f20b27b179699abd1b18875270a4350e5096c2265c33499022b14dcb6def8951b58ffe8f8daa0616976d15f82452ef947b04c7111e55dddaa890d08f2df32ab4ab012fffc9c0b95a2ff29fac443f75d7d359390d376f7edad3c16eaa4189a2f76a07aa29f4ccf01194deee845382cb0c8ed53c82a6a0f6c383b93d914bcfb17d45dbdbbd4c60b4aa1373f4a5924751ffa0bd3c1f4c5c211d39b8d8a28466b9da9f674c34030c0fe1ee14202a030f0dac4187755ab07861283a9a27c3ea1ed0b735b04f366314aa94b55e54275cfbda41389232a937d410394dbe2b0240e98140691262a42d464a6c4763af59776711270962bd1a8deee30b866e5161f9a33509faa6041cfc1ce15aefe243bdac95a9ce9e159b44437fa1ca107a398920d0c9fa4bd5dbc4abe8a66f11b1c9290b9c4ea7da037a9a2d4a80b5c988a6ee15e8f4c3cbe6c00dad8ef7bd4fc05760793c4441e15c6f67442d6608d1664ed84c69cd259e06f72a6b6e383222e74d68276fd43498b28cab963546a8a4a376d6a1b6c54cb38f540ad0a7a0a5e558ed8d49c65ff8573234dff5b5c2e90ef52a71c876a7d07e4866ff86ce52bf5e67147a864061b9632539a962a281212dff55d16c868f10c76b584872184b28fd7e17c1f0874c88fd4cbee4675feea3ee10b634eb47d8e7f8cc8ceb30aba2e32681473c4263dd87621d9ddb850c77321e6c5d3ce9ddecbe0d84b33f08a2cd6a9c43a51ffb406deb56fc9c9be972567a9124684cfb5a8e697f36e9b39c255b2a7e90f2323ad8ddcbc509dbf9f126c6570843d200fcdf3e7978a11ad86cae06eb7d7ef5a71b761d9d59d483bec4ae4246abcb2401d9210f464d190dd8d0eeda712168b8cf7c71682dcc602d535da50e5af370a2ab57b0c199c487321a559c4bde15ca9b9b29914b40518a906250ae725936b5d81b70647b0af977220e90af0ff2db9e917eb14e5e7b29b7559e6f05a92670bd1165f42947dbc11d4f2e6652c426000c73b96427931df5f3fe0ee968dbded22b1f6381a2048264c8f9fb452bf9f227d2b6488c3d37799524ebd93761c8dcac0f23cb92fc3e6cfeae41a0d794fe55463e86504bf77a2e3572df63a779daf804c4079f3ecc07a3aba6230fb094171bd8e54bc548d5abb70bb1e02187bc6e98e8a9a3332bcc1946ee27be09303b931dbaa7ad59681e0647ec35cb98c75fa99d49cee0ef4a408018335de18fdbb6092238ef78d0a782efad5be86d514872b8eaeb6ae1e9a0467bb3f39834d94c0414201ccc99be37a6589b9d4f216f54d6421566bca8b1842e55172721884de1586bc2199e265147c4b66c5768ee762bf6b7e1592a66edd88e63ec8220d1b10c9747cc1dbe2538d5c86de08e5dc8d563bd0b78d976e325603974569d5a0ecea68a1eb137cfa86929e19a5bc499a8ffa11804f8e742548ecf240db5c1fc2472a78a111743b079aa1c04b5a1922847b44368b62c44ac1fe2e6cb0831999dbb518bf2a2c8762c8608167b54f4e05a8a8a5f9f37f52c9f1a270d11bd9473989d20dd2aaf951a3fd5e596f9538b547bf34315a76da18a17e4872754dc03cc9f64d44b94ba45d0feeedc3fb83bd704dff9db0222209a46a13c743b25ec6ee4459bf976a3ad278bdd9d2cc28e0230cddf8225f0126b1c63eedd968d761fd14cb8178e0d6bb1cf945c63b42791bbaeebbae05cec33af079d4dafff72570b03856531bf550667e94a01e9e36f30ac305caf743f660ae24b3cc0697cf997522277c0781e71bf8b113365021cb6ab79d5d13dbc6f7d18d345771fdb28dda4ec93d2f6a839aeb10ae09788b105cd1daf376d179a837840b091d455166dd363d086bed156be17179ec628c855741a89e90e35879c94ca67d174f3958017ba1b0db9cdda45dfa659916fc7e2e7a654348b52c96f71c482a6074b944dfb78e1d5664239a61cdad8140cb3e00078207e91831186ac031c4e268ccf19e88e1da8375bd77d27efba6f194e097f92667559d6dcf810c47713b5e53c95c12f10b8f8ebc4e0587be8b261932025c4013835b493cdfc071850eedda6f90b8e753bbe04a7a9ff0cdd3abc02e565e7f7161e4772620466ebe2b68a321df153442bfb8a29daf4afc88178c0437a2b0f07d67ea1134232ff71992fdcf4b3d4e1cddc16863b1bc290f7698badb7d8eafce39d6122ed941143fcb16cc4305692641afe769984310a31684ec8a71ab00cde50099dec3631446ee487b6ba7b1280684d0bedb5ad9ed086583456332ed92909449bfeba094476c25366d9f6f7bb5278a21c71a6ca61fa4d5eedd2195ea3bd5afc0de8177da776f87a716a60439e30416ffff35efb86d31caf41fd8f0ee0ef02eb9fe0a488fd3c4c2207b24f59a70e7a9899b97397177b5080ade5444e557a56c5a714b7b24c67196c5bbefe69df34aa3da8986f9a80a78a9b6bec9c7397fcc9fa7d417b66308eaedf06a83cee338fac89338a596d6ed0e8ac87ec2d2def357d30e158be082c0bb27f5ab778d2ae969eedd56d0c1733237fa789272d38b673693e21904e27f6caae4bd7b667d166d0783a839cd389f89796a93e60c1caa84fdc65f4d1d5ca306156d0ec8e2ea20cfb399ec97687839863bc2f5c96287a0633c3dd4f2894612764a1c41493c35c022e90192fc4dc5ef5d849c8fba078a802abea0163224ec479a95754e9714a5a1f4591b0027bbb7b5e2e35d9d13f7177d2546919b5641de8d49518a44be6b7f6d065e2a86bb79acf96b70a2677d768a8eb06c66d80301db8226a34bff27277ea55911ea4c11ff68d189e90bf89268702668314baa5d906f11da23e269e783ab3006706b2888ae9b2c217fbd6ceb117562c4cff4effb8e4204a66e1ad239b92126a7506ac519a4199dd1c642e581d190bf2c45aa0261b119fd52f2a800"/4384], 0x1120) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000f40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001f40)={r7, 0x6}) 13:36:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') openat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="6ceff21878c1ed62511d43dfa38a168007e2c086bc665c66a67679c8086ab5dd104856cff7e74b33b4c72f0f7f97ba0da2a0eba7e642e5063d6e5956bae01e60ba6f84c30d3483aca3815374636ec8665bbf275f79bd7f60db3657f0db5bd1ed36b86dd57b94f5ec4e104cc58dcb7e03dcb31942dfab13ab4f75a828efb5598cd870505354bc7c16128a1aec3c4c", @ANYBLOB="25d8583f92fc4833b38b7ff7487feb584942a0e15b97c3787800c1cb9f7f67f4332aa9c27bebe1360caa6e59c33ecdc8aaefac46185c4757d74dbc0337131922fdae4b848cf807fedc054af03ab8141c91b2bdd900493461d8e5d0a104ea403b48e324c8f461a3458d72b44ebf519ffc45a6a463dcc3388b4cf9277c25fa898e661ed32c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x1429, 0xeb, 0x33c0, 0x5, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xfa) sendfile(r1, r0, 0x0, 0xfffffdef) fcntl$setpipe(r4, 0x407, 0xfff) [ 3361.265626] loop5: detected capacity change from 0 to 40 [ 3361.268833] loop3: detected capacity change from 0 to 40 [ 3361.268902] loop7: detected capacity change from 0 to 40 [ 3361.271467] loop4: detected capacity change from 0 to 40 [ 3361.275808] loop0: detected capacity change from 0 to 40 [ 3361.281716] loop6: detected capacity change from 0 to 40 [ 3361.312991] loop2: detected capacity change from 0 to 40 [ 3361.319946] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 3361.348197] bio_check_eod: 6 callbacks suppressed [ 3361.348213] syz-executor.0: attempt to access beyond end of device [ 3361.348213] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.349811] buffer_io_error: 6 callbacks suppressed [ 3361.349823] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3361.380501] loop1: detected capacity change from 0 to 7 [ 3361.389288] FAT-fs (loop1): Unrecognized mount option "0000000000000000000000300000000000000000000003ÿÿÿÿÿÿ" or missing value [ 3361.394408] syz-executor.0: attempt to access beyond end of device [ 3361.394408] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.395534] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3361.430589] syz-executor.6: attempt to access beyond end of device [ 3361.430589] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.431812] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3361.440140] syz-executor.5: attempt to access beyond end of device [ 3361.440140] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.441684] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3361.443989] syz-executor.4: attempt to access beyond end of device [ 3361.443989] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.445158] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3361.458759] syz-executor.7: attempt to access beyond end of device [ 3361.458759] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.459934] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3361.488372] syz-executor.5: attempt to access beyond end of device [ 3361.488372] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.489306] Buffer I/O error on dev loop5, logical block 10, lost async page write 13:36:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup3(r0, r1, 0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') openat(r3, &(0x7f0000000180)='./file0\x00', 0x64cd81, 0x18) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73) [ 3361.558016] syz-executor.3: attempt to access beyond end of device [ 3361.558016] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.559214] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:36:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f6669"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70) [ 3361.601055] loop6: detected capacity change from 0 to 40 [ 3361.602602] loop5: detected capacity change from 0 to 40 [ 3361.628039] loop0: detected capacity change from 0 to 40 [ 3361.638392] loop4: detected capacity change from 0 to 40 [ 3361.661317] loop7: detected capacity change from 0 to 40 13:36:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') fcntl$notify(r0, 0x402, 0x80000014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3361.790871] syz-executor.6: attempt to access beyond end of device [ 3361.790871] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.793947] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3361.824769] syz-executor.7: attempt to access beyond end of device [ 3361.824769] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3361.825800] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:36:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x99fc3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/dev_snmp6\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3361.861613] loop3: detected capacity change from 0 to 40 13:36:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71) 13:36:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f6669"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3361.972501] loop6: detected capacity change from 0 to 40 [ 3361.984759] loop0: detected capacity change from 0 to 40 13:36:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74) [ 3362.135771] loop2: detected capacity change from 0 to 40 [ 3362.140225] loop7: detected capacity change from 0 to 40 [ 3362.150945] loop1: detected capacity change from 0 to 7 [ 3362.151452] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 3362.158430] loop4: detected capacity change from 0 to 40 [ 3362.160808] FAT-fs (loop1): Unrecognized mount option "0000000000000000000000300000000000000000000003ÿÿÿÿÿÿ" or missing value 13:37:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72) 13:37:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000180)={0x1, "508288b8a9a87b48a4249b4ff2d69a83192c17f7951769fc6ea8d6285261679754c8d79bd3a9ea660ea04f82e964c9bd35276e26a5de7aee2e0883eb744d4cf4"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000000000002e99a0"]) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) pread64(r3, &(0x7f0000000300), 0x0, 0x2) fstatfs(r0, &(0x7f0000000240)=""/53) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3375.890297] loop1: detected capacity change from 0 to 40 13:37:03 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x401}, {0x0, 0x0, 0x1f}], 0x20, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000180)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="acceaeed64c5094a5d88ca192868e334e0dc99aeb15ed27d11d40396f5af7e3f994821c949a5680670db6b5c9e4f626649070ec7349823a3cd5526104086ca160a82d75343d22811f53ae259061d8af89d9363ce55f13032e45e24c2dd850525edf5cd482f9b69f4c8af421c44f67612cc4e0b3b9c5db264fb1f4de1cb9a0f7918eca3f1f2d4044dbc812d017792ad300f8d6b077cf6fd30babd63fb416df36171f7a345b84f", 0xa6}, {&(0x7f0000000f40)="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", 0x1000}], 0x2, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x18}, 0x20000000) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0) statx(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000cc0)={{}, {0x1, 0x6}, [{0x2, 0x5, 0xee01}, {0x2, 0x1}, {0x2, 0x2}, {}, {0x2, 0x4, 0xee00}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x0, 0xee00}, {0x2, 0x3}, {0x2, 0x4, 0xee01}], {0x4, 0x6}, [{}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0xdb3ca90b45472ee6, r7}, {0x8, 0x3, 0xee00}], {0x10, 0x2}, {0x20, 0x1}}, 0xac, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:37:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:03 executing program 2: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x10000}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r1, r1, 0x80000) [ 3375.906090] loop5: detected capacity change from 0 to 40 [ 3375.918181] loop0: detected capacity change from 0 to 40 ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000f40)={{r4}, "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"}) sendfile(r1, r0, 0x0, 0xfffffdef) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 13:37:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) [ 3375.927825] loop6: detected capacity change from 0 to 40 [ 3375.932868] loop2: detected capacity change from 0 to 40 [ 3375.934427] loop4: detected capacity change from 0 to 40 [ 3375.938704] loop3: detected capacity change from 0 to 4 [ 3375.941900] loop7: detected capacity change from 0 to 40 write(r0, &(0x7f0000000300)="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", 0x1000) r2 = epoll_create1(0x80000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75) [ 3376.148794] bio_check_eod: 7 callbacks suppressed [ 3376.148820] syz-executor.5: attempt to access beyond end of device [ 3376.148820] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.151588] buffer_io_error: 7 callbacks suppressed [ 3376.151606] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3376.176577] syz-executor.1: attempt to access beyond end of device [ 3376.176577] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.177926] syz-executor.2: attempt to access beyond end of device [ 3376.177926] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.178960] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3376.182099] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3376.193899] syz-executor.4: attempt to access beyond end of device [ 3376.193899] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.195856] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3376.225159] syz-executor.6: attempt to access beyond end of device [ 3376.225159] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.228568] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:37:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x8ba88a2913f9d39e}, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x9}, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 3376.346000] syz-executor.7: attempt to access beyond end of device [ 3376.346000] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.348049] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3376.440956] loop5: detected capacity change from 0 to 40 [ 3376.478301] loop0: detected capacity change from 0 to 40 [ 3376.690265] syz-executor.0: attempt to access beyond end of device [ 3376.690265] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3376.692986] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3376.777286] loop3: detected capacity change from 0 to 4 13:37:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3391.147067] loop4: detected capacity change from 0 to 40 [ 3391.149284] loop6: detected capacity change from 0 to 40 [ 3391.152009] loop7: detected capacity change from 0 to 40 13:37:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76) 13:37:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1, 0xa, &(0x7f0000000700)=[{&(0x7f0000000f40)="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", 0x1000, 0x73}, {&(0x7f0000000300)="859945430167d4753894434ed3735efc5d735535b5d89be89433e49abad054e8544d7ad37bfc2565ddc30706ba338e988ab23abad4c14b74a7bd0a09d7d6bba2df4f5a029a1699ccce019c88362de7a4909a11c8eae860500d7497d7b7cc2c99f037ba34564d843a57d5f20f2b2b1734364c2d7dff7766e94d3b51906693149f931f3e1793420c65363d47cbe27141bed2bff8ba33cc5647520e1ac5c951514e3580087fc3f17554a39b2cef8051cbc4c89e9d1b07335f", 0xb7, 0x80000000}, {&(0x7f00000003c0)="3c66c727e2a8dd068797218a28bb641bdb560cdedd77499c56d618bde100aafb98c7d14a5c303b54fcd0fae3f12f2cd71440ed3209969f8fd5b55923bfa4db906bddf13fb54a2e09336e74cf41caae38b816731aaff6935af081150414380449e1b4e7351c91bbac77ea00318c84ec0c792f9f313ba37836ee7993a4c7f03534e57de8d8f8d7ebae1957d64ddd8bf609277332cc211ef06be96a25c07a3c6ce5d6d21fd9db401b", 0xa7, 0x200}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="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", 0x1000, 0x8000}, {&(0x7f0000000480)="a61048d9a278afac487d875ac820e05e39c095433c68d99a9f267b364934b699c67634afe5a8bf29f6e96a7a832ff3beb3ee5e2cee55d1cf0e7eaa37d2920bb5bcbf97e3de4a0994c971650859559422d2a393c7fd870569d3861314da86bfea481baea101e7e66123e3ae00e261999f5659b3926abf37", 0x77, 0x2}, {&(0x7f0000000500)="7d2efb59d02c6b4c6fae7584bd5840f1819b2a1153e6111569cde7a81780b33f6c4c5113ad6ae8798f3e2d9a886c85e6cdc0c6c53ed3e9fa116e572593b3e28e540f548dbb2b6be645c26a", 0x4b, 0x8000}, {&(0x7f0000000580)="e28fe437697d592e5b43fb0eaf57e11962b6ee8825be5cce2e6ddc426d039cad34735c3f6e132e57dd5aea58d75e79a6f315f4d47ca59142bdebe12f520652c991cceb1690ef96be2d27f344399970d7eecdfe638c1b2f630810ee484627b018d44503b7048d468b2b3d75b0909dcdcf45b843db309fcbfcfe9b5da4fa06", 0x7e, 0x8001}, {&(0x7f00000001c0)="09e05340ed18f614cfaec6731f11ef9a5d0bdb60e665c8f5b32c08f65ff1a0a550ef898b02dbc2", 0x27, 0xff}, {&(0x7f0000000600)="e8fa3a5720444c6448d55326a833bb0a86848043b234efc5576d8873cc0a82a2e06b73322090fb118b44cdf7dae40e1611d2f7a7cb90e6c305d30345f4ca79c8510aeab134f67ffe72f04f3d79cb3d8fa56ade818eb0771a53a25b1e0a84d53b4aa6e07055e4460e3aac8e82695eb4f4d5e6d8d2f0ba5026308c5a185ff48a14a8c75dc27d2f20c7828cbf6f233082a554656f343fb7cd3582db5762da460b48b5cfe937d5d9f13728fddd02de2ebb36da2391c99db0467a3bf0e13a52257f61874e05ba35ac76969e5aa3b60b29e71120274586", 0xd4}], 0x201010, &(0x7f0000000800)={[{}, {'{+/'}, {'ip6gre0\x00'}, {'.}'}, {'ip6gre0\x00'}, {'^'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_measure}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73) 13:37:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES64]) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x100100, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44000004}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x5, 0x7}, 0x100, './file1\x00'}) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3391.163993] loop3: detected capacity change from 0 to 40 13:37:18 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000f40)="3055239524e887a035fcaadf77b8f9f357a756cb1f4361e61b79e54ac0764f0baaeb2961a20979c1d3af2cc9c7613033798a81c891684324781700afbbbc92ee8e8cf7bed1f62237e5afb29af5f5983e6f101fe22cbd282fcc858e312834ee165e84de67f4a48f866f756b0fa746a8d838247fa5dbaa231ffe65ab40e6f59adcf0efabdd0630982cc1cfe2ef9d37137c1f1637fc2bc64155b97ed671f043cc93f75244d47f76e836e790751c71f05949937cf469a20ed1e638dbdc3c975467dabcd5158cd5825b29d52e3cbf525f48f90200f0816a755e8122051f734dc583c2a7fa42a5c3c528ac063740d08ec6c5e5187d461dbfbf8ebf72e9e78e3e57395a4b8db078586664fce477985b95c0335f4ea4d474eb947a543c629e9ee0921a1020564b676d498d00d4cdb27ed2b66e2ed63dc2a6e8d14e117ee70b4c5655d07bc1e75e1d46fe6670cb48be9549ba0b660a7109f89a1b4566df90c4d28e0c521294f17ca136d815f8b14f6c13be3f0e2f999eec0228ee934b58604cd689fb2e9da408da11b713e579eb0766e3b8e5d66003938bfbec3d7ec97f9ec2db018d0e80d50ae7d92fd49722c2f15cec4bacdfdad3e9af583561c3fb2cad08e9b2eab0a401760d8c1bb8e1c81a15f16c62d72459611fe5ed7e07fe0744b879795798bffd3be1185e24c8bf401df2988aa1b20d0585fab129d241d4bc9116f71392e311361fd96f9565ce294f642141293f1cb414a17e86c91e7d3dda5c0690caf4caa56c542aab98541d69619ee51900c8c72930c2aaac4f72ce33c563bc65cd50b83c50e5b446f70b038bb05fed98ade2193d223775a2b9eae232cd5bc159f476c5283bbb2e062de122bb7b638a703c8a88ffa9b9eabc9ce597be317197992c8a0d4ab81bc3ff8f0ca2b066fb84291337ba2ea82826d16c7afb375d91ebb722a04ad464ecfb515df20e7563793238b7d19acb7d90f5ed1496570464a8502285213ac33e5eb151a4fcc5e7327197bcaf2f5ac2e8c9801ce8363ed7df2dc656d761fdb314490cfcec1d1633c0d627a716b16b14df1373dd4324651d78bef46389cd6d460457c9ce30a0bb78bc4c07336903eb2ca4b2144311a337b4622a415dd87da6f671e9b70a5c4b79a6120999c6e2293cc3a76d45ac150db39f8c66bd5867c64b8ad12a044f70149b7a39fda38df493159e54cd2cd205b799c3fe99467bd7041c7489b0e7eefb1f4ede1645f31deeb5aa2577e090a3f2c15b76f7dd022850cfa498200005522ae6729892fe24156be3f83c20f6de69e7605ab42e4e06d180690835f08f8643186ae06c02a6508100dcabb1dfd5f6f3ec78377554f33e04c7c423ad606f0d9623ecac4fb5b31464e1c42f6a5ddc4ab47a9290114093be6e46aa5df866f1a391d4fb1bb8c2e694a90ebd385db6a7d508e92a9ce0b25f9803a9a4bfebeae9fb4c0c18bc88e06a1be0af35ad4719ee0722049263b7a46a54f0e554b38f2d1bbfa05fca8500cf771badc0afa2005790cfa589634a80ebcb82131d7ae83aff8985a3d1decdf4bd7eff48fa19d35010cbdc2e22b1e9580c50f4b61fd7a54bbd2e3cc138d4e1e92820da6fbaf3b930160736b10d785c293b1cd5be11b95a1679a18b28f7102bbd14ddf702f118f8d55bcaad54c5f81937fb4f63f165241f4922d53cd574ebec0b131be7b4b39aa62b6d65313f2efa9cadc7c4ff44f7c605e76d0edc23d50e34b2d9de637a8f4fc4cd664b2baa7cbbaaddc14d4d40eeef0ee88520dcd9c01c43f70cc5bcd2a600d906208dc20f0bcf33794aae9eb64958919d4ab2f932faf79fff59e49750d444703d7cdfd610e2641c2030318da002e9f9eba6ca3fab1ec97996283c27041f40169c58ad37a8d79ea2652d95cef20fbd63b64a648dbbc3a0960b57127399c4898fc84e7266c9c837fb46b3b1e28916675fd8a8d9990dcfdd2aa5a413835eba0a0449fed2724e6570884313697eb3ed61ea2b19cd1292fd861e6f32d5e2b8e74e7d0283bf4ea036aab0b824d2365ec93ca2c9ff601a1d69607353349fdc58857bc274164ea8428c0eafeaa45a97beb9d00f2fdc54542c5f7dd9b2f2bbe1eef9a1eb7cc7fdb1cfe530842b90db07b44a33e8e4cd6c9d5690ee543ddbe562b924e72c2fdf6389c43a1ad1724513963d3baf36c995a7d1da79ec3c36209a2f9e93f509717340a5e5aa326df4f297e95f15f7f1d0ac8a76fafc8eb4d2d444956f65315356c8f17fb93eaedab929e7aa6daf7d397d8dfc3f0ba4f356654cc13edcaf481a1a5d1f6c76e65f80496aef151d3d847579b14abf73e185bfdbb0ce9292bec3af79c7affb9e9f3394ce10f90369b26e9a3165be73d119ea7058bb2e173e628f6242bbe9739bf64807093bb5e80033d0897c8c09621f7f039e6d37241a30789d8db295dc8e3ccf52b87fa32956fb302ac77fa25310e1166ef7d70a7fca52b272002536130661a4bca714cec879f3a754b8651e5325a8df10ed990987def9cc420943af7bc0624faa26508c3fd6c8dd43304e051c39feb02626e58e2cc74ad8e1dba32fc6e7ffd5169a04fa1fde266498dc767f50637af4dee446d3561278afd9c5581bd834f2b5a76c75202185845e741ad976a4cb3fd681a5e67fe6b9506d88835a0a4f0c4bdbd86da013ea78883441e664cc5751676d855eda2e0240e962adc1f259885aa1d7fea5ef0d3e6f947bb7af5644065a1a6719c9bd0b37fe23a9c90af3df9c674a6fbb509eed892127fbc646aca648a5363b8c535f1bae4eac8ac298d7eff2d22b567a49511f19ad3098d876358c2fe95e1af9f85d93278711063474c55214a275519fb10a418832b8b49d9d1af349a603e8c22cdaeab180614125573c246df35b538fc8116b3fe5a7356f0c08a3ca9829c2c2fd5aef68975c449fb7479dad5ec60c5f10ca3f25eb801ae711b7f883f3477caec88cbfdc0ed8c85015a473302049ab790a7421db0b5cac97be92c4b82ec5e009e4475a83dba96b8ba3fa3c0068055aa7f3ebf91524f500a3511801dc2a8638170e8d3b43880b7d3eb259a5723cfc99da7a5171176255e1547e6d7ccf8256308bd07a34a2add4c6cf0d7747c3bf98c842d3f3a5b5a4ada1e24697ef1fa80b3ec6209c5f2c65d16f16e0a4cc13bf8b95bbd6be4f31cb8b31ff3c4a21ae66b4b01656fa20b2ab6cf448513de588cd8991aec708579790397fa066d984c5e6bb60c2f76c3958c6954716df590366e49c4cf0cb678fd2b2b331cba1e345878c735ef2fd003586705e44c322a2e53206677c7b41a1844664c7860b1f5a9bad8e753403361a4a09789df31a0c48cbfee5970323c3975439cfb62d80b533f799d90059991213fcffd4d79fb5db6d0e851b7d6f06597186314bb8ed9cdaa91676fe182b808c8117c160fcd7db4781dfe9dbff9cd21b09ad196aeda359b431aa08ed31da7d214da78490112ea6ac9945b1c138fd9c01f09bba260c49e1a8841c1202961a6e2852da5e061135243c51e7fc6a83e3ab673387d7b49a13557bacfb1d7a2c11f39604c18f1b2d39f2f195d27b503db25605643890462724a49e95433fa234a25b6cd33f55ba39028a944676eb105576b060e5f55b7fc25b8ec386a2a89c1f29a04fe715dd7f3c75c9a291d618b2e3eea8441c19e3b60836baf9afd1ce90206074d9d4c80b576afcfbd1726f3e22e014e50e78a37dc12c3a913500917102cd5a2ffdad48d59a11db84bdd9a0ebf42d8f22aa7d53e1a70a47abbe7f37a6afde3f6c6149d91d8d9058a5e37757753c0b783b4bcca703427ae3e8933f04d23058ad645fdbe5bbf2323db9fe2862ca5198aae5f24229b3e03ca9ed3971527476a141e2e45c7377639297ecdbe58485175c3d0d592268fe5406b5873d3e2d1282a29af238a2760fe331d9c5af201e381913078b45071c23e4fc81b8606e6455d281c983d03a06e5650df7321ce55803d86b77764e1188e3035b1c492283651ef64e1c974cc0115b2defd93c328f99613332db005e9e18e169b03bb214c4403ccc62f944a265cec54fab5088f7de379e5822cf287c306b5845d70b62d4553755fa83a20c5248d06a1209421aea3866750e4ebd26968d7ffa88cbdc7d6802612d5e53208d22e003c340ecce694da3b23e0e2b59810de5903ee5149c78007f25e6ea700faf5695d61fa03595f0305e3ee96a347c71fbb314b4721fb3f2ecf5c13bcaab31bcf9ee42fd8a7ff1845b47f76ef1e5a89b536a8ebf2f512e7196f25b839e43dcca8f71e4c8fb2be2fc081d2809111e74b6fbe6bce0fd878b8df75a290b69f49129d9ed8bac3413a32e52a620258ed01ecb746cf42df1aeee9fb638f85b99f2da9fc828708ff53980599b097fd0a1dafa84cad398c5f6404554e82dad148e442571051f2e340fa3a32d48e740917a7fb8ffa9daf515ed734fef1e3b1edad3fa7d3cfbbb86269248619fa84a4147ab713303f148a3502c6e9706a08de1039538ef0d0dac6bff36fe957e0f3f1b13104cfc64aa3cc4bacc77a6c7191f71435f6f9f3256d6f0e7a8e10f6dea6fbe48c6fe561d27fa13974bdbc6cbf0c2d040b7c4637a1e4389aec54da470cc8de1b6695acedc3a4cd0e908d22bb00493eea64c315209e52d881c5088f712e9ed67988e167f289637742643de13753c0def5962bf82d391e0a1af133a4089b659247ba414da846b02a06ce9dd01dda0a51a96c7d0b30227e7e358bf899bca853bbe10b8d70034c23127c496aac1bd98c91c02733ccc322641e37bf7cf06f4750765c72896d06b7921421230905b039bac3c121344028939afc05b23e4a56cd5763ef6464a71cb4d849f8981ae9183230e693896c70880c302a4d13f05aaca9539ee143570384dab268dd5af72b0a9424f7be87609919eca790213661dff9ea650bdc9652f981c63c12e36beb444e4c321c4b8cb690aa966f86425a18ef5b1035637de8f74ebfa089e3e117aa2cb0d732dbb3f0a89e8f1bd3e1010d5d63c7953b6d1fcd2a6b260ee756b6e30ec00f7920ed351099dc6d6bd6d57155bd9ce44d37af75a8ddf317e87a69514cec62d2d7f7895ef27d5d0d372ae002becdb625c2597130c7c6f6b076db5a713a9eefa31bce1bf5c5395a18fa6a6f922ef78a7cadac0d32d20e8f3c819e322e102825dfd4e9e13cfbbb9bfa95805ce7726d4bfadaabbd2cae3310f76f52dddb10911845ca4cdd2d8e821ea39f4be1494c302082d8da3de0a12904cd3545bc89a11845a93f8434d7d595be23d6dd95a9c78539ff99183e1f6672f083a79c08fef86b60c1ddac42b91c4e26b94d7eae8c17e2053ed2f04696f29fe6cfcf10a4890943994953ee45acd177e82f8a6739d740f0f20da4c8e41cc8c06ee922d81f8dc877c9d5598c5f9316b71d90836df5d1450405aeb6650569a505fbbedd0d004a2f022a4be06a4bbae1ff15a4fc211545b617336faba602eff49f5b20b20439708fd178b66ef133e5f3ecf795134f6d1f79ba101e31f23794d73d3bd38c71acd3d0103eee4d7ca1935eda3bc85a8bb92351b420c1357731ab7e3963e2aacf871b85427b15f53c5529a9a9634365ed8859c3aa5dc099763de8aafe855ad6b1c82ab3f84bfa0f6a9a55147dfc3731438d7bf6a1779d09b5d0a75132ac65b5fb0ec8b2dd4563ba6cd95f43a69b842ea391bb2d42c22e19418bb72dc35aeb91877746a7010a477fb983cff37317e2fff95db88963f032acf2df98f3e4fcc2d1f34484de7c0b9632ac876b7d61da4b80c30945ff9871b44a6568f5e60038e3cca65161cc894241d0c2b08", 0x1000, 0x5}], 0x0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESDEC=0x0]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x501940, 0x1a8) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101042, 0x25) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r0]) r4 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000502000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) accept4$unix(r4, 0x0, &(0x7f00000001c0), 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x4}, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:37:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x88, 0x4, 0x8, @private1, @local, 0x700, 0x40, 0x1, 0x7}}) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000300)="1c80a791120de4d792cec2975dd8645a2a080a83d2609cd7a173e33c364e8a4123da88ac16ecb44ebe1b863f3056fd0fd5e2354b7cd661bd15ae15770b6d353a00e4b0850663f341feaac64f870d140dc76ace4ae108edca963046db70c91df3c2b5f5fc4a6dddedc65f103e4fd305d6d3df0e66538b674cfca3df8f37c33702794565420d46057babbc1e7a64c973bab4dc5f6440b8cf374699e275e4fe23ac2dced21c38c49c011f001bfa8445bc8689a41335ec977cd4d6310cb0a6a821afee7814569d3bcffcc4876548", 0xcc}, {&(0x7f0000000180)}, {&(0x7f0000000400)="dc34e7a00ed9ed0d1faecf96fb43e2ab168854d6e315d6f5ce0c93c5148c3aad899eee638f395a6f60108ed32f3b0292c7d88071928585e330a190e83808b8b022fe9db3a9730b8f1d2880f78915e562d918185931ceff3899917abae9625b61d2807b51fba0f722449adbe0b0f55b543882e20766cf1f77246ecf73d07e42cb601cf933d9f9b9", 0x87}, {&(0x7f00000004c0)="7778b26205574ca6f004a70f3a59841b056a37ca29496f992be44095dd329acbf41d9c3149e9a54496f84a2e5ae9782bfdbeb647859ddfce6abffca6343e2d7a28f34b44967a179d90f902429980cba601e1ad4f40592a63ec591738ef19e1382befc9b83916eae81dce4d53703858833d3b4a26dbf1455426531672bb1d9a9a8e20b74821d3e8be0052f0a074327f3cab86d44ae637f81f7c973e36da10893229", 0xa1}, {&(0x7f0000000580)="def42143154133b0fedb15575e530f9ac82b89e48eb10414b718ac4d1be9eb2e254a90f0ec5ec56e94a75b868fd5840a3f9353067f7bde78cf81cc4ed2e55fa9fa07e02a46fabbb0d87a6380e69500b100aeae58c3a7db8ac1870edf0ba23fedffe95c722ade0a6cc87cadfe7adcd3dc6b10da1f068cdb49821d96ba6990ac5aa4b1f58686df33ffb16372ca21f12d71137e35221bf7b560dc6f60839932f8b62c3523e6325d00fa51fb8db4883c0112ae65c5f9a67dc49872df5b3c6f1ed56f04355675d1ca47dd98ff58300b30c69c98477c3d73851a49f750c88f", 0xdc}], 0x5, &(0x7f0000000700)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x2c, 0xf, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x3f, 0x6, [0x9, 0x1, 0x4]}}, @generic={0xfd, 0x16, "09e20a8cbcff8003fd12dc8126205dadc99b1c61e4fb"}, @jumbo={0xc2, 0x4, 0x400}, @generic={0xf7, 0x2a, "1c8a1866b6551ba8dd6391b46e9d8d5f14e7729a5784a6cf8ed5341620388bf25415d10244c8862fc955"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x964, [0x8]}}]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="4529f378385adb821caf107452f208bc763170d881802a21f5fe4daad1e689c64c01172a81c6d5d801de2ff769b13a828d521c190b56ba10f29c052d3a9f07", 0x3f}, {&(0x7f0000000240)="b5fd4e8dfef2f7fb61a7a6e9", 0xc}, {&(0x7f0000000800)="ce815a115f241032ca4c4ea8620f863d8c1236beb37532707bc54dfdbcc2614c0f9e1296d203ff5c55bff3ae4571e73c1fc8217a1322b705fca846e71d735b441c408afc518777182e36fc419e60e16bda47dc28e587423a8dc9f74aa6deef5831a87a36cf69e736b7ef05b35531779dc080ca80", 0x74}], 0x3, &(0x7f00000008c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}, @hopopts={{0xb8, 0x29, 0x36, {0x2, 0x13, '\x00', [@generic={0x40, 0x10, "c18632f2358fe94563af992ecdad14e0"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x6b, "34027a0e314c934ba86f56b1295c4e6b81f6d4fced0f9ca1786b933258a58576e5e3ab82e73775a4c4bf050b885ce6e0e9d23757b124deff7dfa24781f37bef016e101170a18441a1341d997101c88b264f154018db0aefb55618d11108882fcec3d7b1a768dbb60a809ec"}, @enc_lim={0x4, 0x1, 0xae}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x11, 0xa, 0x2, 0xd6, 0x0, [@remote, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9fb5}}, @hopopts={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x32, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x38, "5153b6d4048d5f2bcfe4f2eeb7f2df5ab0d879d062d005489c27204442b987a34d27ca693c7ef28f6a4861c276b0f4cd728d980501dafe3b"}, @enc_lim={0x4, 0x1, 0xa7}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x218}}, {{&(0x7f0000000b00)={0xa, 0x4e23, 0x5, @mcast1}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="5371b56b304d9faa52913078cafab4adc7afbda46e19ec66797a8485a72c7c2ff6d30cd725514c397404dcebe61ad3ba564f4138924b9bb51a2ccb9927b6e45cbe04e11fd3d6e1b8320687d0a7bd2404e1c28ed38b2ad0c1f791c2c3ec7eaa8135764aa14c4d52cda1159b923e189c", 0x6f}], 0x1, &(0x7f0000000c00)=[@hopopts_2292={{0xb0, 0x29, 0x36, {0x0, 0x12, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x1, 0x4, [0x3f, 0x9, 0x1ff, 0x3c]}}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x5, [0x4, 0x8]}}, @generic={0x31, 0x33, "69560160f0e99007028a3b8802b01c0164cc32ae0da4c947ead91027501aa7586e0342f7803cb8ca03eea4c9cdc4924271226c"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4f, 0xfff7, [0xf61, 0x1]}}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x16, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x800, [0x6, 0xaa, 0x1]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @hopopts={{0xf0, 0x29, 0x36, {0x2f, 0x1a, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x7f, 0x5b, "a51475c79b71c572045f05b274402fa7147109f6a20dabe4ff8d3062663d143ecabe92cd94a10f7b7e6c183e5912fc40601fd5dc7acb2b1051384267c85e84e2eff49171bdd0f2c94a846b773b1e8b2b29b3ec97bfcdc4ea78801b"}, @calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0x40, [0x283cbe3a, 0xd22, 0x7fffffff, 0x6, 0x1ff, 0x5, 0x2cd0, 0xb19d, 0x6]}}, @ra={0x5, 0x2, 0x4}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x62, 0x0, 0x0, 0x7b}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e40)="8f6dc48c882a", 0x6}, {&(0x7f0000000e80)="89d2b991f517a6afc51d33cd89b2c0b052cc084cf8d00941ed8c6e26c5f6a8f41c8cfc1617b6f76b074322c7d6a729115cca8e304867680007bbfafbd66c7ef6afd4a26319d81152cc2fb2ec9b19e7aa3976e14beccc48fa86f755a99c423ec2c511cb2657184b99d343acdd66a4755a4282053cc0fc7e17dd03eff360064a8d22a214fb2ee672e0ba583a95debe0f9d93dfe617aa90d71bb71a0d1420aa93b1c96876f50480aedc7aa67b33ffbfa9301a0639dcc8ac3998cce664cf39764fc8e35ed8e7876f7f165781763583d4d202f29bd53d9d9c", 0xd6}, {&(0x7f0000000f80)="d54df5727cf83b471b4247c0c9cf6fb9b5a3a3bc", 0x14}, {&(0x7f0000000fc0)="b0605fa81f6a795ef82217b9b9a9f051c9e2d762658a942ee0886ce5f62d870a56c58b8495e3bc6f7c8aaf763fac1efe340c571b7f716522c061896ea20b9c15c533239dc5ece3b069d47d9343c87bfaade4eba8ee7612b7dd9b18cd8013f04fd6428e6a7172775dc4f215941cadad19a104e7f2394df54d0070924051853e03d42da818b553cc1d052ee90567ceaeafb8fbff71f0133c8a54336b4285f13da4aa0014c09152bdce85cfce02304f8481a2f3e598", 0xb4}, {&(0x7f0000001080)}, {&(0x7f00000010c0)="2404b72d5677b15798d85c4195eca6393948c7a0cf25af871f7836dba97af8ecbc414905a15f191c", 0x28}, {&(0x7f0000001100)="e6f462054b13e7f253c69c4d77064d78bc271d5fc8c2e5b54041e3b4c736b0458134de72b9a164e2f7de9c9c70912a17e4d2eb8f587c818715e801d6e15175e88472b775544edf11ad29c84555385e3f79f1dbebf9157a0905855f4046260dfd96dde8f331b4e01ef7ca13e4665003db9ce355ab21285a51e784b908c85f9c2cf4067f7c6924431292e9792290d4848118223c7bf8c09f47dd5dffe6a951dfc3428fe3da6f965836f9795b8fd044c0", 0xaf}, {&(0x7f00000011c0)="d36028f5c0ad91df0a79472b47d8591444464e2f41af03e8ec794d642d99a2a58afd38bb6a1b18fabdf8833fd165d4e5457586d2c046f5f01b887c7df0f1a7db682f52169fed3dfb11a8b4c3e074b5f3867ee7df1d489492c3022e18cf2722c6aebb40e0f1a602f15a7b348fb1dd50d7de386cdce29048f10a4b2abd3b30f35dae85edeca1238c28f8a3d64d5ad7507c9fd2f328b5f7d6decc5fafc8d8e4689ac939ec8ad1b3e4b01c631a93d6fb31af06b139ef88f60240cc7a838de6d6", 0xbe}], 0x8, &(0x7f0000001480)=[@dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x3f, 0x800, [0xe3d1]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x361723ee4f7d2be, 0x0, '\x00', [@enc_lim]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}], 0x78}}], 0x4, 0x8804) 13:37:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() kcmp(r2, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000180)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x7c71648a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x9, 0x0, 0x0, 0xcdf}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = getpid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000180)='./file1\x00') getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00', 0x0, [0xfffff801, 0x8, 0x1, 0x71500000, 0x40800]}, &(0x7f00000001c0)=0x54) kcmp(r4, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8401c, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3391.204106] loop1: detected capacity change from 0 to 40 [ 3391.221722] syz-executor.3: attempt to access beyond end of device [ 3391.221722] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.222747] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3391.236738] loop2: detected capacity change from 0 to 40 [ 3391.240748] loop0: detected capacity change from 0 to 40 [ 3391.263605] syz-executor.6: attempt to access beyond end of device [ 3391.263605] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.263681] loop5: detected capacity change from 0 to 40 [ 3391.264546] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3391.299699] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ00000000000000000000" or missing value [ 3391.320956] syz-executor.7: attempt to access beyond end of device [ 3391.320956] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.322146] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:37:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg(r1, &(0x7f0000005300)=[{{&(0x7f0000000180)=@ll={0x11, 0x11, 0x0, 0x1, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="756ee041b867af5565d95b6df9a907ac523ef57ba8888a8e758f181d03c6e3c96f6a18d7bad662c4838645e04f5d53fa8cb833179c6cde26bdd1e15e6e0d70b59c5310f02b5308fc73d4540e0bf3c238bbfd969b34401cfeca9e359862f2551dc0a394b7c44510601d38bf4b739ae0d06895730b6ab030026f5417b4ad3c689762c17fd07c1bfae95eaf1ef18a79814522e76971c03dc57f395bb39207018fedc70f8d38d8a9e45392f39e649a91bf", 0xaf}, {&(0x7f00000003c0)="9f516824c314064bf1e8c7a0575d15966217b5c67f379c3eb2a9a92e3d9acf97ed996b07eef01903dfb707bdc264107ae15917395b3ecf1d8398c3aca2b7bec8f41db7eb70e5e59cbe0bb2c1df7dc5c9afa6c34fb882f2bcabcae3a97064509ebe8d", 0x62}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000440)="22608952ddb266824ee3132b4b36a2d76a9cde4e6ab540df47302899e892519ce587092efe909d8cf2abd411532df76b605f71019b7e614c0f047310d516c93aff3551a3f9cd7ef8581a854bc9f1e97befa165", 0x53}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="31e16bcc03b97b656e25f3d5dc5bf506", 0x10}, {&(0x7f0000000540)="270237ee5db193e1a8255384c636", 0xe}], 0x2}}, {{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000640)="622faff4325543589b142900f4d02958861d0c1c773c85402fd58e00a09a4fc4b89819236532b34daae0f266e89b821d242bbe43b03782b888479506f2a816dcbd2816209382583fc022d9", 0x4b}, {&(0x7f00000006c0)="2f103e2a671b8daf74c0ae56cd2086b8d945913a202669f5034520fd8b7cb74e41a9a42b8131584c5fc607dcd3a7c45ec8be79690612428889c7d1d77d2438592a6eac7680a46041d4ddbf402b5b4eb49c38c3", 0x53}, {&(0x7f0000000740)="694249055520031e14cd552bf5e4a4b08a50c8cbe021c9372698a33ee24904cfb13d8d3d089c42846be0e6ae6dce9e00d6f9f88a6115c32c67a656a71c0353f26d5b52f5244fe0baabc4c14c45", 0x4d}, {&(0x7f00000007c0)="d9c250a9e7ec4087aa2206071ced10fab58f08027299646e69dff0014b66918a7dd1efd87df01ecd8760e5a1a2a7b88f9cdf096e871399fecf9641fb49114ca02a3f70026317778d3db644bcb57dec3675e7616d4d535378bb1dc710e167a7167fea01d70ace5babf89475f3519fbf59afb3d620fa6dbb38904aa26591864f65896aec866753903b2a5e2eb11cdf82ffec7033dbb1be7c78224ef09bbcf97700a64987491b3db792a3fb859181217ac8a2b8567dba48e89fe2ea62db1c317f40a6589cd73efa96df3b76112b1c2cc121788957fb6e625d7350003262d76ad11623d39e1790e54fa906bac3fadab80540d84095d7d8cbcb", 0xf7}, {&(0x7f00000008c0)="d77f410496a48f52e25c2422df7d469d6f955d9918dc633921c1ab836aa2d3b9277a17f204da34b5c459a56b66e366c1f9764c14577b056d7354f517f098554b7016820e74bc48184477947ae9765ac59df98457384ed8199c229545c09de1c27d7ba354b8fdee376fbb00615708bd5e682a3f915cda6bc3429deb34ce507c21edfc105ebb379534f305f5886e5cd2e00f5afeaaa9b4983db797665aba79d7ad7c53dcdb2333366f28bb2247c56f21", 0xaf}, {&(0x7f0000000980)="c4d31a0b83ff89476cf40f26e6d20cc3bce83d0877177905d488686e58bb2ff3153d57e836aa9ebdd5c9764e2d7d20b5569d5d1a6dd74f5ed8410a22d119bfacccdd7c139ead9a6fef0e09870331286f715a5d6581ac1e551803271ab8a7e79ab84052ffe7d957377c2840f44a9cc9657a0249a32c2b0502e375ba913b77f809c31bc2b517c2f3ccf6e8f0d2c34d706744eb152e74fef7d46ab843583fabf28d1ad501e1189b0e69c67435953a", 0xad}, {&(0x7f0000000a40)="e4694e121028c3840ed6cc6ac0e7c99968b34f6e8cf739e15465d0c1e7ad5fb491d11bdaab5b9bbf8e0a0156b061c390a3c9ed58169fa37b198f873ef313db586c4a4bd4f3093f1baedee8f82f1b6931d0c911981a98dd760e75bf808ce9490c156ce999f585d79415c8a008bb5cc65e637b41edbb4e3773728fc0f9b9fa20c17a65a3e152233006106605a1ad5c2e3c95d99d4a8aa0b3011d54ba2c70c2b57ca543de235d26f6b5aca6a1ac8388c3a991eb23ff1ed72ad99e00a309051a8203cb3781f95883b1963213077c6a5bc7e5913b23c22c8427736441e80b916dd9cf7494", 0xe2}, {&(0x7f0000000b40)="b6d983b24592f68d87474a20492bed6f0ad5d0a036bc4e07162b3491b07a9134faf7328ba6f17b33aab16e7cfd46b14c32ea6f0778789f24e761e18b6c8d84235151df4dbb493782e123acc9e84c20471faf91d77fa257a22178459e178536705a1638f50305e103900d5fb0a49923ee902bd5606e7cc9baad970c8689c600cf8a53ddd8667d7dde", 0x88}], 0x8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000c80)="8096827e5d0c2927adc90f09eefd7f3690a89d234115c22590cebd75f7e3a92dc34fbd972029d170b942f3bd24851032af9b027a73cbc00b9394a68aa29f39075f8a5db44f32f2d8eff597b324c17e9e08df9e0b7372d3f58dfb94b0412ad9ce74eff250bcaeb80907f9b031cead472064bf12b69e5e718a79b34538c3ec31d877538eb70fd7209f989f3bbcd76e2f46f36fa654503bd71b4fbd84e8d922f261ebe829117ea4445f710dd98c91bb1c0f3849830d5a799dc55a72d70156f5c01d067e23859c6b5d2d1db995f644563ca43ff412961e1ef70ffdf4fc057f7337ce9f2e6a9da9f83ebb1f2524", 0xeb}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000002f40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002fc0)="81ebd65d624d79973d6c0aafeb87a0e856afa0f4d6fdb527efafa6cd61a348d23b524501741bf960f6aacaa015aac2c0c1dfe7ecb4935776309d3e033f5b1d2dd5a8a4dd1a35c7c53b3392679a5ba3aef4c6110a3f5b39454fbfe7785118b2f8851272de86fb95239695612bc60349fe57cf68d1b27f37a882c2659ff1d57ef500c86a601a24bcbea5be17814dc29b686252a3d376e59184963cfe5cdeb7f97440fa7b42d67fc8a6efab6117b1ed660781b307f1b0c9e4d311bd033ad04b9695", 0xc0}, {&(0x7f0000003080)="bf065e7f278626bd0ad63e1904698d72794afbc9ff5778d934b6680ed0ade6fb", 0x20}, {&(0x7f00000030c0)="2c33636325ec3fa89ac8e2da8c63736af5f2a487e6301b34bd146065c18f4f72bcf4bb61ff0a1f4055374c13a7f26c9b96fda498e5a77445f977eaada46112dd7bd8ad8b1a03fa7e5cdec980a981a5b30f0cf614c9c1af139fbfc540521fba53c1c114da967dbe5e80421062bdcae17bad1b85b76f12ff952ee11d93063cccd78f05ce2273fc", 0x86}, {&(0x7f0000003180)="7e748be9565cb77eaa40cafbae2ab3b0e67387ead37735386a4b5731178154e618588010950a76690f8ec64611b03005582bb215", 0x34}], 0x4, &(0x7f0000003200)=[{0x60, 0x105, 0x1, "22f295f640789700fbf14ab798a03b4772d32ef680bb286523ee8948ea09d7671b733e802c076b1c153703c6624be347212dd1a96fcc189332f24bfd99831d66acb7b51b7418c28862"}, {0x100, 0x10d, 0x9, "4d68a8713f830b62a5cc1c40cd0a469cab1f84a926040d2d362a737814fd7e3d3efc593b717866c3d402ffba1d85eea3b33ab789ce26792b2aff88a460fcfdae2007f10346b74f14adc1408a2a5e622fdaf285fea31cda9a65c51d1f022de7bf1f185b12ea878f665b99a07e8591be88dd3981ff7eb474efd5a0e61970d0b98d5e71561774540a6b1058ec7371c55b739e66ceab6907895a70739f82bcc1fc5d2bcad13ba442202ee06d53dffa1e3cbc546304555b91f55386fd9bd2795c95d11bf2d59b2d955d1d11bae29f9217dba4e076b764ab28898d7b1e68fed83085d359a4e9c610da2cb95089fdb3"}, {0xe0, 0x1, 0x5, "314e29b492f75d6027fa8c9a3cbeb234c3a0ed11c4b7f8dc14479d174d7b82fc864533f162b1fd1e2a06a2099eac304cc11703754477e2a26ff8873ac55993ea529b7a3c10cf68038124733a67ebed314b666bd39a50873b8961228afce3a7cd9e802fe27f55eb9020f27e4daf7ab9041be5baa61b556b16d4da2cbaae59b6826d37dba093176832351f9abab45aac0ace78ea54fcc4e2f17a3b321181620e881dcc1a23f8ac39b2187a2ef1278fc0439e0719cff4e1921e7ec63fa677ecc05bb2332e769b35fc8d2578882bf20924"}, {0x20, 0x1e9, 0xfffffeff, "47c56bc9131a01ae1b15ae"}, {0x68, 0x105, 0x9, "59401addcf0ef855d7213e69818f55def8afcdcb599ad35f8904163803a8dc1a50f61e3a04313db9a37f7b398e4c0c2acb0b0bc8593fb39f7086ce303cc8cacc715dab33aa75bbc26750887a4f598c990f7419685452"}, {0x1010, 0x113, 0x101, "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"}], 0x12d8}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004500)="72aba0f56e95a420fcf5750a619e0d12a39ff7", 0x13}, {&(0x7f0000004540)="6c9d9aed510a67c0e4001539c7b67cffcd3fb76ad18cfb9b67d39e9738509ea8df9105f241b9154868b928da01e145b7ea17741f1a265cdc615847f0f2a10e0900c0a872a1a6a9a0adbb2e", 0x4b}], 0x2, &(0x7f0000004600)=[{0x108, 0x10a, 0x400, "0ca634ed354048ff7fcb28d1cc6e18a0e23eccdb6f9b7c109e1d2c8e368a0d0e0d2f82d36b1edae587b165f7b285d4fd38ef16996e4f65b41c1657f8cf7e70c1ae8b0cc725b86b54d6acccdee4ac13a6de08569f726d770648b63311f311672019c91054c88681cd3bca9e56dc8340c94e79cc0676c9f19af4f3bb26e2ffe8bef928b8a8037d243db4d5f8ef4c4f10b8363283007022967eb6b2c36f4f40122b2401c503266249386acd96ee76076f210c08cb0b952502d0b3ca5f759b4fb68b81e2590aed4043fd2c16a6dac6d2f5ccd6854687741e27f1cf1176dc513220dde1b9dd07d292c31f6a3ac730ca3af6983505"}, {0x80, 0x10, 0x5, "264e04b5d4ba668d255a477909675cdf2be6da76de5eb16067fe0ce879d55749a9c02145ca77f3fb9415daeb725bcfe9e0ea94e82a252394454471931a42ac8d10d707e2380f8db6f65a9f5b55b973454cf6e57f8fabbca2a2b9050d80ddf1469133eb69340910e77b6a"}, {0xf8, 0x105, 0x800, "cc946c4a8756bc93d8fc41a17ce435c393f28b7421f59cfb43d37675de7dba9adb1b818fb24844c7ec691c0f18daaaaf19ce025920d1f3fc3e75c45e575565362dbfbbd6bd970cf3b18492fa9bf1f8c513721bb24c9f1a2ecb1ca5ff2c16c421011c24b9ad955d15c852e5faeff5cd8b2f10d439ac3246928881ae4c9c77b2bf15e04528cfd74c9a372d41ab2cd4a8f0e1923daa17255aafd33c21a34dd1f48c24371a21f5ae4da8fe9530c98fb908e350f2197c4774a2a2b0592aee770b5d3f970d21f1f23b44ba4bc18beff495a8d398c53beee41f4e4916b46f54c1ebd0ae27dd90"}, {0x88, 0x13a, 0x2, "6f281ead621bbe2200ce687ad3263d76b2f4f1470b7034bc7d437e459195318c1fcf5c54f583ef96aff0e29952daeaea5bf392b64b864f9a9b2e4ad19147a8fa653bc6ef23cf42088f7d8fe0f2654ddff66b88f20dc64eca8ce4d822a100cc16985afd615b6d7e8a09c38c8becb9ce99feb235"}, {0x88, 0x10e, 0x7, "f6fa0c7108bd4d93484b53561c8573843ef37f247abf5d6b934e84d4aee6af1d8cabcfbb303ef858a30239d7d12ea45cbb4007d9f9cdb0db922c470ee391cf21a2ca12e0f3eb7a232d441da4e7b6abd7f4c7cf6baf6751835b8d60fc803b2bc87a5e3eeb2be9d479c0b7a2f3fa4b89e906db1b7b477eb9c3"}, {0x38, 0x10a, 0x50c, "d81faa418a8e0df9148c306fdee37f57a2f405acc47e434699df6dcebb52509d674c16f4501f50"}, {0x100, 0x6, 0x1, "9e008394c69d9129f12608d1448ab6484b2990d3467f1bbdf58e33e9620073bca3e0696175f4f9b298f1dae1b7c32e68c8a4f5d8736eedeebcee356d169eee16903957ae2007edf9501fdf4442baf34e30a1e7ccf9a32638eb2f947789bfba4d853afc655b6c30c6358d52404da0f66ebc9be158acdb2a141ddcdd48828c533d32aadd35fdd4c8c9f3b8ced7f3547814fb7cf8382c7325a7b2d03dc784bf7650004376133f0d9ab441dbe8c9017c9ef6f9da0409d9fd7333fa41a8bf870dc278830ba70162cec8a23c6a7c438633a1a22e8cffd5e05046fe22ca6e576e2e8674801e4071531ec702f8"}, {0xc8, 0x10b, 0x10001, "f64fa3d8767aefac458ce12197d8803f14e50e413d2e62c85b1c0132b5b5f2e8888861d81904997e144204aaaad1c3557dad9acc6d73a7598a1e211fbf9f8c62445d7385bf2f5093acb4757338d9b155b7ed33805120c18ce5fa420c1428ed5e11e9864b2b09c9a0364ca999b7f1816828eef7ca32d88eddc585a970547d05f4d8fb11b99bda3236b829e87c82eaabe590b44cb51ea8f3e0dc89b4989f29683ec16153b6ac8668d5a589d7275200bde0aac479"}, {0xe0, 0x112, 0x1f, "695b920e3880ce68ed7b3bfb618d2989de88e3235087ec777bb74cbbd1260ee0d834fd6dfef7ab831c8001517dc1b946e4c4e1151fc5958038611a0097ae635d163bd472d9eca3f2f40a92457d9f32bfd334317a6b52d5b9dbd82e605be14f7a733a5f6ff7471949de10dad6c4e6f2b867f21e2d9814663c70a5ed62aeeb3560d14f9139cb3b4c5626b02c1326cb841ed0a8dd3ce1537b82a03113018c6889f802bb25929ca72b97bf3fcf98428fa8ef8bef3adbad54fc4e54567f97d32a8a380183e5e385fe1c3a8e50"}], 0x670}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000004c80)="faee8b9403937d92f66520f18d725a5e1ad37f703beb8bbf91cff31aeef04d496f2cbbb27396f1c922c8f4ba790f1efa6107e2b0a8b4205309f3d902ffe1aeea369a22c89b8bc01b08e3eaf79742e6d565089c00002ecf6f04cef57e66ae5c0bb5a1fef025cdcf9fd79594fdce76f9e5ba096b93e65c8c193faeb21b430ec1a26ab1ef164ec2b6a46e92008c2081a90bbc47682cbb14125cc69e50b26c02e3b1493cdc9bda738a9f7c7fb20962c4bcd308adf041f8066cd46bf61a6e81ef5d897e98518a15eec4a7821aaa70b785a237151f4bb6b35b4327c72c12359964e8c90de8c966cfca09f4f2dc41024df882907713", 0xf2}, {&(0x7f0000004d80)="b1ed7b63975a2a42a4eee0b5af1eb251f9a575c4ad72a1e82a6718375762105432e4103eaadb942a6624b015070600c25cac18a58c11ff2e17deac5a59b307dd7c6091006f728e716a9087224ffface28043fe188e9d4a577ce6a2c332abdb6376bdf7d331cc667a81eecc661a55511ea921b04c8d838e1e8f179bcd17f5b49dac35a444616cbc4fcf34da8f7e828c3cb0a6c5a6bc739664d2d82bfefdbf28961c2aa41faa8e621a490b87949f6ab9b3a88c8d14135a22d87ae2bce646a9db9385f7a61f7dd130ca1b0aa197e9c30f068d86a43685f7b11ce44c73c4530b2b77b9e0b9b21460270fe944756c479ab70989141e00", 0xf4}, {&(0x7f0000004e80)="17e8df5c036c57c1ade814e805ccb206e940b0e9839541ea275aee5e2150f909167704bf2f47e8e9ed9d50cc25f1c0986d6c4837c014944363cfb4854252ab68fdb45f266c3b99a3a8eef36c577424548ed606699b9434605bdacbb4e77f0745b9fca3920b083385aafebbd14f9a", 0x6e}, {&(0x7f0000004f00)="0d6fe1914ec7ae6fe009b45cf42359d8d4df089fe68a903caa68b37f3fa7717e6cd886c7", 0x24}], 0x4, &(0x7f0000004f80)=[{0xa8, 0x10e, 0x7fffffff, "e1722e2b405c04afb97fbf727812bc0ec620c55bb4573833870aa226a4001f709030a06ae78218905c0991c0d13586985de437cea96225cf3bb37a9fa7c301c4aa037ca96c93a7c653e8a03bbfde86b725b46959ed2d5d4f4bb3a181a8b8f500bcd47356cc1be5dbbd51a8f970fa9a2998e007313537889167b8d515caa613b89673d739f0932e59543bbe7af87300835880d1fed8b2"}, {0x70, 0x1, 0x4, "560cca489fa6f77bb2558744cde67d6c0f35a2696db2e2e5499977724c10677d7ceda7281149552e4b42a949e9a7dd584129ba847e5074807fc13c9f528b25a638f35e1be054f1475e38894ebffc85f50fa6e74cece9c20d3f903fd6885c"}, {0xf0, 0x5, 0x1da4, "1f11ac835a1d3e57c916ef5eb57f4172fc29d2724e0c6454701ca893cc868ae581bf130833641de097b04fe8d053af5299d47bdf066930a770ca6edb9d91432d8fb95a12594d83c77f040d980a84b5e4dd007617d17dfada15bbcab44089a0278d26ff58a9faee1773807353b6807042bc9ab72cdea70f38e9a031d547aba25982ddc7773764de4beddb5e44e7c4d664ab48b7b86bf7e747f67261628510a5f1c4d3d1b4c5f8713fc39e2dac4380d867f75051829ae8b2fb9f61b3fcfaeb13bed7ce83ffa7767f454bbfc1ee670d9f2a13a822ce1c99713f5aa90c9bc3e5bbcd"}, {0x98, 0x117, 0x5, "021f23f131a9498f3adf561a8264e4cdac8ec5b3c814dbeb81b05f08f6cf24818af3ee00f51965c9106855a9b8f57fee245e4046ce08216b0adb26ab0088ad48f1889b6c6c1576be697cbcb2a3c552161c286e97dc79bae463f13873a34c8d3b3738717f037259cf165fc213cd4339f716caa7d0a57b409157ae4a59879c00babce924d1b94192"}, {0xc8, 0x3a, 0x1, "f9eb1364a71065fddcfc195b8ad89064329af1ae1e03ee716f3d8b4d7e87acbae5fc0c7940be99761508b7aa88c89f2a566341e4184790efb78f824919383498c7d6dc61e0992c88d91301a088116a07c7b5905eeaf8c862b159fbb23ec04333c172bf8d7029eb5b66a00469d3b778b8b0f919f28615d668e3108b89214f6d6d7f8b3327d312b6411dc59fb3f9d631de140c42a16f3ded34d6dfab4aa0190e28684c302ab09ee31a84e8d56bf495d17a4905783a2c24"}], 0x368}}], 0x7, 0x20000000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3391.362128] syz-executor.4: attempt to access beyond end of device [ 3391.362128] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.364035] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3391.383728] loop5: detected capacity change from 0 to 40 [ 3391.398034] loop3: detected capacity change from 0 to 40 [ 3391.401669] syz-executor.0: attempt to access beyond end of device [ 3391.401669] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.402673] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ00000000000000000000" or missing value [ 3391.403703] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74) [ 3391.438613] loop6: detected capacity change from 0 to 40 [ 3391.495000] syz-executor.1: attempt to access beyond end of device [ 3391.495000] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.496870] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3391.498901] syz-executor.2: attempt to access beyond end of device [ 3391.498901] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.500240] loop7: detected capacity change from 0 to 40 [ 3391.500873] Buffer I/O error on dev loop2, logical block 10, lost async page write 13:37:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77) [ 3391.517619] syz-executor.3: attempt to access beyond end of device [ 3391.517619] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.518750] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3391.558376] syz-executor.3: attempt to access beyond end of device [ 3391.558376] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.559235] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3391.568276] syz-executor.6: attempt to access beyond end of device [ 3391.568276] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3391.569602] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:37:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x28000, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64, @ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:37:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@remote, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="681756e78d93660a874cd6f5879d2b3203f6768c52ff8cd3fd695c4ddc2a4ecede2be230b6895f63df9a009591ffb3681856604f9acacc68d9875d3a781078316f955a3e652b18ae"]) ioctl$CDROMEJECT(r1, 0x5309) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x28200, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:37:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') connect(0xffffffffffffffff, &(0x7f0000000180)=@caif, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) r4 = gettid() r5 = open_tree(r0, &(0x7f0000000380)='./file1\x00', 0x80801) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffe0}}, './file0\x00'}) syz_open_procfs(r4, &(0x7f0000000300)='net/icmp\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0xfe, 0x8, 0x0, 0x0, 0x800000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf228, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) [ 3391.644748] loop4: detected capacity change from 0 to 40 13:37:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:19 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) name_to_handle_at(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@reiserfs_5={0x14, 0x5, {0x8, 0x0, 0x5, 0x4, 0x154}}, &(0x7f00000003c0), 0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$security_ima(r3, &(0x7f00000001c0), &(0x7f0000000300)=@v1={0x2, "f2d8cf9e5c9bad2841c24cfeabd0032adb886d3a"}, 0x15, 0x1) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:37:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800000000002bafa0dd1cd3fca992e7b628dac90000000087422a43f83ac2eee1", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3391.718215] loop1: detected capacity change from 0 to 40 [ 3391.723549] loop0: detected capacity change from 0 to 40 [ 3391.734778] loop6: detected capacity change from 0 to 40 [ 3391.748921] loop5: detected capacity change from 0 to 39 13:37:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75) [ 3391.794194] loop2: detected capacity change from 0 to 40 [ 3391.911579] loop7: detected capacity change from 0 to 40 13:37:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 78) 13:37:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsync(r3) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='veth0_to_hsr\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa806}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3392.217429] loop1: detected capacity change from 0 to 40 [ 3392.242971] loop4: detected capacity change from 0 to 40 [ 3392.546176] loop5: detected capacity change from 0 to 39 [ 3392.569206] loop3: detected capacity change from 0 to 40 [ 3392.576237] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 13:37:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x21c9, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000300)="c0ecdb4d5ff0955fdafc9075eb5a3e58c0b2371e5a14c59da26c3e2fc04671ee1097992fbd8f8411d88c6968af545be29d42fe470b6028b0486938e82363", 0x3e, 0x8000}, {&(0x7f0000000340)="ec64d1862d1b71c5ec946ea91a35f7e9867e87961218f1640daeee2952bb385b40aa30e8f5dcc52dfa6a22398f1ecc38b14c4f9c1e291421e2df7d7d77ea794e078c80dd81c750780deebcc4dd89048cc5995fec960f2c31e798e3fba1199f927b007d783c9945fbe5e95dd19fb5fe710250a67363ac", 0x76, 0x3}, {&(0x7f00000003c0)="dcac131a8d75d9402076edcf392e7d2564b6ce4cd50484260088e2d32ff6ad7e080f1500706f3e7fa5b75246499e1ab1249b03815843f08d6245334bac3d4cdda600acbd6251e4695e09f841a07146d7ff9db1d9939c6f4f035c8429b327523b872ecc3d5652665821465c4757f3a724b8dfdff17f58189c9083661224ba089d", 0x80, 0xfffffffffffffff7}, {&(0x7f0000000440)="8993a0da8b78309ad7fee98415cc1db657cb0fa90618567e86298cbb00c78c0f4c451666cdaa12ae35460ec88621ae9307302790a297ab35d20167132481aaeb309534c17163e67dca55532c9eb9a535e1ead47e615f39c547205eb51c65aad4d9b0d144ea3e9eab4f11583ac889ed28f3d445a163c6d8d885502f", 0x7b, 0x1}, {&(0x7f00000004c0)="69bbc87c748341a8015a868f39b75f5e4e4ad003eb3f77313863919a6f361756c816837788b00fc953a854dc4f42e816f7992fe250994be236b009a88b36ab7fc084a512be6f183029eefdb0c33b533fd1b8803a887d1f9fb7d062ad23b7733c1565ce7a85da87e874e51894130463d8a043d285ce29ef059f5c0b30597d37aea7ca4bffc180384e60c187685d957b02d161c767c58f8a6d5ec381a54109119524d05c3d36b0934bc72e", 0xaa, 0x3}, {&(0x7f0000000580)="27fd66d9cf3db957e755ef8a5de86313c4d2a0deb795fab1af7d5d69ce4f1eedd61160f0444d4042b8fe24e6c1a6a7d668ec0b", 0x33, 0x1}], 0x20, &(0x7f0000000680)={[{'vfat\x00'}], [{@obj_role={'obj_role', 0x3d, 'ip6gre0\x00'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '\\'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000700)='{{\x00', &(0x7f0000000740)='./file2\x00', 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f0000000180)='./file1\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380), 0x152883, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x3f}}, {@version_u}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@uid_lt={'uid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@dont_appraise}, {@fowner_gt={'fowner>', r6}}, {@obj_role={'obj_role', 0x3d, '-$@'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x5}) 13:37:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x20, 0x7c, 0x80000000, 0x21, @remote, @empty, 0x40, 0x7fc0, 0x8, 0x6}}) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) r3 = getpid() kcmp(r3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x3, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="efd7779dd2799c353219fc6012c1b08ab3e590464db0489625c8b04772dc59028e204229ca1bf77868371eb405404f9a65d66e2b16177e3a11f94e15769b342b3857df624f42f4062e7704501e31561550ec838b14975afc8e7ca438a2d829a5", 0x60, 0xb3a}], 0x4040, &(0x7f00000003c0)={[{@utf8}], [{@subj_type}, {@pcr={'pcr', 0x3d, 0x9}}, {@measure}]}) openat(r4, &(0x7f0000000400)='./file1\x00', 0x2040, 0x48) [ 3406.187014] loop7: detected capacity change from 0 to 40 13:37:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x105) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000300)={0x0, 0xff, 0x3, 0x1}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 79) 13:37:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76) 13:37:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3406.191053] loop6: detected capacity change from 0 to 40 [ 3406.196233] loop5: detected capacity change from 0 to 40 [ 3406.202655] loop0: detected capacity change from 0 to 40 [ 3406.203926] loop2: detected capacity change from 0 to 40 [ 3406.243661] bio_check_eod: 8 callbacks suppressed [ 3406.243676] syz-executor.5: attempt to access beyond end of device [ 3406.243676] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.244976] buffer_io_error: 8 callbacks suppressed [ 3406.244986] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3406.264923] loop4: detected capacity change from 0 to 40 [ 3406.268951] loop3: detected capacity change from 0 to 40 [ 3406.271123] loop1: detected capacity change from 0 to 40 [ 3406.287642] syz-executor.6: attempt to access beyond end of device [ 3406.287642] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.287722] syz-executor.5: attempt to access beyond end of device [ 3406.287722] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.288589] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3406.290042] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3406.293209] syz-executor.7: attempt to access beyond end of device [ 3406.293209] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.294251] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3406.346108] syz-executor.2: attempt to access beyond end of device [ 3406.346108] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.348093] Buffer I/O error on dev loop2, logical block 10, lost async page write 13:37:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77) 13:37:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYBLOB="01000000000000002e99a0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40247, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3406.383085] syz-executor.1: attempt to access beyond end of device [ 3406.383085] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.384784] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3406.421081] syz-executor.2: attempt to access beyond end of device [ 3406.421081] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.422758] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3406.433035] syz-executor.1: attempt to access beyond end of device [ 3406.433035] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.434010] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3406.453598] loop5: detected capacity change from 0 to 40 [ 3406.458732] loop7: detected capacity change from 0 to 40 [ 3406.469151] loop6: detected capacity change from 0 to 40 [ 3406.474174] syz-executor.3: attempt to access beyond end of device [ 3406.474174] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.476269] Buffer I/O error on dev loop3, logical block 10, lost async page write 13:37:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) read$hiddev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) fallocate(r2, 0x2, 0x5, 0xfe7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r0, &(0x7f0000000180)='./file1\x00', 0x163100, 0x10) [ 3406.505024] syz-executor.4: attempt to access beyond end of device [ 3406.505024] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3406.507066] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:37:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x20000) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x181) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e99a02f66696c65302f66696c65"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3406.563649] loop0: detected capacity change from 0 to 40 13:37:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee00, r3}}, './file0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3406.725846] loop1: detected capacity change from 0 to 40 [ 3406.730819] loop2: detected capacity change from 0 to 40 [ 3407.334010] ================================================================== [ 3407.335027] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 3407.335913] Read of size 8 at addr ffff8880102561c8 by task syz-executor/13565 [ 3407.336810] [ 3407.337036] CPU: 1 PID: 13565 Comm: syz-executor Not tainted 6.1.0-rc7-next-20221130 #1 [ 3407.338007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3407.338991] Call Trace: [ 3407.339323] [ 3407.339622] dump_stack_lvl+0x8f/0xb7 [ 3407.340137] print_report+0x175/0x478 [ 3407.340637] ? __lock_acquire+0x42c9/0x5e70 [ 3407.341190] kasan_report+0xbf/0x1c0 [ 3407.341681] ? __lock_acquire+0x42c9/0x5e70 [ 3407.342236] __lock_acquire+0x42c9/0x5e70 [ 3407.342775] ? __pfx_mark_lock.part.0+0x10/0x10 [ 3407.343370] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 3407.348092] ? __pfx___lock_acquire+0x10/0x10 [ 3407.348727] ? __switch_to+0x5c3/0xee0 [ 3407.349303] lock_acquire+0x1a6/0x530 [ 3407.349842] ? kmemleak_scan+0x1a0/0x1600 [ 3407.350427] ? __pfx_lock_acquire+0x10/0x10 [ 3407.351025] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 3407.351798] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 3407.352545] ? lockdep_hardirqs_on+0x7d/0x100 [ 3407.353154] ? _raw_spin_lock_irq+0x45/0x50 [ 3407.353723] _raw_spin_lock_irq+0x36/0x50 [ 3407.354272] ? kmemleak_scan+0x1a0/0x1600 [ 3407.354830] kmemleak_scan+0x1a0/0x1600 [ 3407.355375] ? __pfx_kmemleak_scan+0x10/0x10 [ 3407.355987] ? strncpy_from_user+0x107/0x500 [ 3407.356595] kmemleak_write+0x574/0x680 [ 3407.357136] ? __pfx_kmemleak_write+0x10/0x10 [ 3407.357752] ? debugfs_file_get+0x1d2/0x450 [ 3407.358326] ? __pfx_debugfs_file_get+0x10/0x10 [ 3407.358958] full_proxy_write+0x121/0x190 [ 3407.359522] vfs_write+0x358/0xe40 [ 3407.360029] ? __pfx_full_proxy_write+0x10/0x10 [ 3407.360658] ? __pfx_vfs_write+0x10/0x10 [ 3407.361220] ? lock_release+0x3b6/0x750 [ 3407.361757] ? __up_read+0x192/0x730 [ 3407.362276] ? handle_mm_fault+0x43d/0xae0 [ 3407.362833] ? __pfx___up_read+0x10/0x10 [ 3407.363395] ? __fget_light+0x212/0x280 [ 3407.363950] ksys_write+0x12b/0x260 [ 3407.364475] ? __pfx_ksys_write+0x10/0x10 [ 3407.365041] ? syscall_enter_from_user_mode+0x21/0x50 [ 3407.365725] ? syscall_enter_from_user_mode+0x21/0x50 [ 3407.366416] do_syscall_64+0x3f/0x90 [ 3407.366936] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3407.367630] RIP: 0033:0x7f52c42805c3 [ 3407.368119] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 3407.370414] RSP: 002b:00007ffcedf103b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3407.371392] RAX: ffffffffffffffda RBX: 00007ffcedf109f8 RCX: 00007f52c42805c3 [ 3407.372320] RDX: 0000000000000004 RSI: 00007f52c4336ed9 RDI: 0000000000000003 [ 3407.373227] RBP: 0000000000000002 R08: 0000000000000d4e R09: 00007ffcedf3e080 [ 3407.374135] R10: 00007ffcedf3e090 R11: 0000000000000246 R12: 00000000fffffff6 [ 3407.375049] R13: 00007ffcedf10ef1 R14: 0000000000000000 R15: 000000000033fbd4 [ 3407.375984] [ 3407.376303] [ 3407.376535] Allocated by task 100: [ 3407.377001] kasan_save_stack+0x22/0x50 [ 3407.377535] kasan_set_track+0x25/0x30 [ 3407.378060] __kasan_slab_alloc+0x5c/0x70 [ 3407.378614] kmem_cache_alloc+0x1e1/0x410 [ 3407.379158] __create_object+0x3d/0xc10 [ 3407.379699] kmem_cache_alloc+0x273/0x410 [ 3407.380245] __alloc_file+0x21/0x240 [ 3407.380740] alloc_empty_file+0x71/0x170 [ 3407.381275] path_openat+0xd4/0x29b0 [ 3407.381782] do_filp_open+0x1ba/0x410 [ 3407.382295] do_sys_openat2+0x171/0x4c0 [ 3407.382821] __x64_sys_openat+0x143/0x200 [ 3407.383369] do_syscall_64+0x3f/0x90 [ 3407.383892] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3407.384574] [ 3407.384806] Freed by task 13: [ 3407.385221] kasan_save_stack+0x22/0x50 [ 3407.385753] kasan_set_track+0x25/0x30 [ 3407.386281] kasan_save_free_info+0x2e/0x50 [ 3407.386859] __kasan_slab_free+0x10a/0x190 [ 3407.387419] kmem_cache_free+0xfb/0x610 [ 3407.387966] rcu_core+0x7cf/0x2070 [ 3407.388444] __do_softirq+0x1c7/0x8f9 [ 3407.388959] [ 3407.389192] Last potentially related work creation: [ 3407.389819] kasan_save_stack+0x22/0x50 [ 3407.390353] __kasan_record_aux_stack+0x95/0xb0 [ 3407.390986] __call_rcu_common.constprop.0+0x6a/0xa40 [ 3407.391685] kmem_cache_free+0xc1/0x610 [ 3407.392212] rcu_core+0x7cf/0x2070 [ 3407.392685] __do_softirq+0x1c7/0x8f9 [ 3407.393196] [ 3407.393428] Second to last potentially related work creation: [ 3407.394164] kasan_save_stack+0x22/0x50 [ 3407.394697] __kasan_record_aux_stack+0x95/0xb0 [ 3407.395328] __call_rcu_common.constprop.0+0x6a/0xa40 [ 3407.396076] kmem_cache_free+0xc1/0x610 [ 3407.396641] exit_mmap+0x253/0x680 [ 3407.397150] mmput+0xd5/0x390 [ 3407.397608] do_exit+0x99b/0x2720 [ 3407.398105] do_group_exit+0xd4/0x2a0 [ 3407.398639] __x64_sys_exit_group+0x3e/0x50 [ 3407.399237] do_syscall_64+0x3f/0x90 [ 3407.399782] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 3407.400497] [ 3407.400742] The buggy address belongs to the object at ffff8880102561b0 [ 3407.400742] which belongs to the cache kmemleak_object of size 368 [ 3407.402425] The buggy address is located 24 bytes inside of [ 3407.402425] 368-byte region [ffff8880102561b0, ffff888010256320) [ 3407.403955] [ 3407.404199] The buggy address belongs to the physical page: [ 3407.404940] page:0000000065e832be refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10256 [ 3407.406177] head:0000000065e832be order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 3407.407396] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 3407.408227] raw: 0100000000010200 ffff88800844f780 ffffea0000711280 dead000000000002 [ 3407.409295] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 3407.410353] page dumped because: kasan: bad access detected [ 3407.411102] [ 3407.411346] Memory state around the buggy address: [ 3407.412009] ffff888010256080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3407.413002] ffff888010256100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 3407.413976] >ffff888010256180: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 3407.414952] ^ [ 3407.415725] ffff888010256200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3407.416727] ffff888010256280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3407.417714] ================================================================== [ 3407.418685] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 13:37:35 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff11008beff9a RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888044519b18 RBP=0000000000000001 RSP=ffff888045f7fcc0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffed10088a3372 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff888044519b18 R15=0000000000000000 RIP=ffffffff812c1fbd RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f919722a8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe27d7322000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe27d7320000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc61645ff8 CR3=0000000041ad2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=7269762f736563697665642f7379732f XMM03=006c6175747269762f73656369766564 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=0000564381f97dd00000564381fca480 XMM07=00000000000000000000000000000000 XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82483d55 RDI=ffffffff87fb1ae0 RBP=ffffffff87fb1aa0 RSP=ffff888047f8f1e8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87fb1aa0 R14=0000000000000010 R15=ffffffff82483d40 RIP=ffffffff82483dad RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555568aa400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe64da619000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe64da617000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f919788b550 CR3=000000003cf40000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffff00000000 XMM01=00007f9197245e9000007f9197245e80 XMM02=00ffff00000000000000000000000000 XMM03=000000000f00000000000036706f6f6c XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00 XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000 XMM08=200000363a372f6b636f6c622f766564 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000