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", 0x1000, 0x9}, {&(0x7f0000001240)="60af6caa918ab7651d1a56a79d0c33c673180ac917c73c7dfe175b31e811a60c9ef442e4a54414377c85cbc023637617073364c32f1513c625c6b59dd8fcb128aafbfd21323450a5c7c20fe36234aa309736c0c3896f9c0320743f4503c32b690bd46163cc18666be18c7f9d578b58d627814e8d9d6a154df8f1bbc9f226e5bbf10fec2b593e2c10be8bc4a7a0c510968363fe9b1ff9f53b7da8ad9bd6fe3094df8a8b6a00c342dfda22151b3e13e20ab33e492c44a54f0ad79cce90a2b2ae80414ff0ffff00ca76fbe2df", 0xcb, 0xfff}, {&(0x7f0000000180)="bc62144d8b1fcb1837813f5f0840073cb3fdde0938d09ba97bbfc2ef7f334c73564f6b9fd1cdf33ea202e88678fa9169d7918c89676c6f5a3b167ce3839f906ee18483c2a0dad688dcdb2f12323eae5f3606d8c62c9293a9387af9433913358cbcc9c5a3505a929c4e08bd3e64498d312af0b0d2d9c878bcff3a18f98a9d", 0x7e}, {&(0x7f0000001340)="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", 0x1000, 0x55}], 0x32020, &(0x7f00000023c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@nocompress}, {@block={'block', 0x3d, 0xa00}}, {@cruft}, {@unhide}], [{@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\\')+\'=.'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_gt}, {@seclabel}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = signalfd(r2, &(0x7f00000000c0)={[0x201]}, 0x8) mknodat(r3, 0x0, 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffff) [ 2250.514696] loop3: detected capacity change from 0 to 40 [ 2250.528192] loop5: detected capacity change from 0 to 40 [ 2250.532373] device syz_tun left promiscuous mode [ 2250.563651] device syz_tun entered promiscuous mode [ 2250.586253] device syz_tun left promiscuous mode 22:17:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x7fffffff) 22:17:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:17:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 89) 22:17:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r1) openat(r2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r2, 0x10, 0x8000000000000000, 0x452) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x1) 22:17:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = getpid() r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r3, 0x0, r4, 0x0) sendfile(r4, r1, 0x0, 0x401) [ 2263.484182] loop1: detected capacity change from 0 to 40 [ 2263.485735] loop0: detected capacity change from 0 to 40 [ 2263.488494] loop5: detected capacity change from 0 to 40 [ 2263.492775] loop7: detected capacity change from 0 to 40 [ 2263.494628] loop4: detected capacity change from 0 to 40 [ 2263.498851] loop3: detected capacity change from 0 to 40 [ 2263.504408] loop6: detected capacity change from 0 to 40 [ 2263.532127] loop2: detected capacity change from 0 to 40 [ 2263.578103] bio_check_eod: 18 callbacks suppressed [ 2263.578116] syz-executor.6: attempt to access beyond end of device [ 2263.578116] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.579503] syz-executor.1: attempt to access beyond end of device [ 2263.579503] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.583999] syz-executor.6: attempt to access beyond end of device [ 2263.583999] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.585141] buffer_io_error: 12 callbacks suppressed [ 2263.585157] Buffer I/O error on dev loop6, logical block 10, async page read [ 2263.608279] syz-executor.6: attempt to access beyond end of device [ 2263.608279] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.609933] Buffer I/O error on dev loop6, logical block 10, async page read [ 2263.617082] syz-executor.6: attempt to access beyond end of device [ 2263.617082] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.619023] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2263.645188] syz-executor.6: attempt to access beyond end of device [ 2263.645188] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.646184] Buffer I/O error on dev loop6, logical block 10, async page read [ 2263.646792] syz-executor.6: attempt to access beyond end of device [ 2263.646792] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.647625] Buffer I/O error on dev loop6, logical block 10, async page read [ 2263.652305] FAULT_INJECTION: forcing a failure. [ 2263.652305] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.653205] CPU: 1 PID: 11840 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221205 #1 [ 2263.653799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2263.654386] Call Trace: [ 2263.654582] [ 2263.654754] dump_stack_lvl+0x8f/0xb7 [ 2263.655069] should_fail_ex.cold+0x5/0xa [ 2263.655376] should_failslab+0x9/0x20 [ 2263.655660] __kmem_cache_alloc_node+0x5b/0x400 [ 2263.656006] ? iter_file_splice_write+0x169/0xcb0 [ 2263.656366] ? iter_file_splice_write+0x169/0xcb0 [ 2263.656700] __kmalloc+0x46/0xc0 [ 2263.656963] iter_file_splice_write+0x169/0xcb0 [ 2263.657303] ? generic_file_read_iter+0x330/0x550 [ 2263.657669] ? generic_file_splice_read+0x1bc/0x4d0 [ 2263.658035] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2263.658410] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2263.658798] ? inode_security+0x105/0x140 [ 2263.659126] ? security_file_permission+0xb5/0xe0 [ 2263.659481] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2263.659859] direct_splice_actor+0x113/0x180 [ 2263.660189] splice_direct_to_actor+0x33a/0x8c0 [ 2263.660532] ? __pfx_direct_splice_actor+0x10/0x10 [ 2263.660895] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2263.661266] ? security_file_permission+0xb5/0xe0 [ 2263.661624] do_splice_direct+0x1bc/0x290 [ 2263.661929] ? __pfx_do_splice_direct+0x10/0x10 [ 2263.662280] ? lock_is_held_type+0xdb/0x130 [ 2263.662608] do_sendfile+0xb1d/0x1280 [ 2263.662892] ? __pfx_do_sendfile+0x10/0x10 [ 2263.663229] __x64_sys_sendfile64+0x248/0x2a0 [ 2263.663561] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2263.663920] ? syscall_enter_from_user_mode+0x21/0x50 [ 2263.664299] ? syscall_enter_from_user_mode+0x21/0x50 [ 2263.664687] do_syscall_64+0x3f/0x90 [ 2263.664973] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2263.665351] RIP: 0033:0x7fdaf7a13b19 [ 2263.665625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2263.666878] RSP: 002b:00007fdaf4f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2263.667428] RAX: ffffffffffffffda RBX: 00007fdaf7b26f60 RCX: 00007fdaf7a13b19 [ 2263.667930] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2263.668430] RBP: 00007fdaf4f891d0 R08: 0000000000000000 R09: 0000000000000000 [ 2263.668935] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2263.669433] R13: 00007ffeb2abfaef R14: 00007fdaf4f89300 R15: 0000000000022000 [ 2263.669959] [ 2263.681991] syz-executor.6: attempt to access beyond end of device [ 2263.681991] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.683106] Buffer I/O error on dev loop6, logical block 10, async page read [ 2263.692199] syz-executor.6: attempt to access beyond end of device [ 2263.692199] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.693165] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0xc8000, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x10010, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 22:17:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2263.772216] loop4: detected capacity change from 0 to 40 [ 2263.775702] loop5: detected capacity change from 0 to 40 22:17:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 90) [ 2263.797127] loop1: detected capacity change from 0 to 40 [ 2263.825838] loop3: detected capacity change from 0 to 40 22:17:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file2\x00') write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2263.865470] loop2: detected capacity change from 0 to 40 [ 2263.881390] syz-executor.1: attempt to access beyond end of device [ 2263.881390] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2263.971610] loop6: detected capacity change from 0 to 40 [ 2264.010326] FAULT_INJECTION: forcing a failure. [ 2264.010326] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.011938] CPU: 1 PID: 11854 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221205 #1 22:17:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2264.013001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.014220] Call Trace: 22:17:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2264.014560] [ 2264.014989] dump_stack_lvl+0x8f/0xb7 [ 2264.015516] should_fail_ex.cold+0x5/0xa [ 2264.016057] should_failslab+0x9/0x20 [ 2264.016557] __kmem_cache_alloc_node+0x5b/0x400 [ 2264.017149] ? iter_file_splice_write+0x169/0xcb0 [ 2264.017782] ? iter_file_splice_write+0x169/0xcb0 [ 2264.018409] __kmalloc+0x46/0xc0 [ 2264.018877] iter_file_splice_write+0x169/0xcb0 [ 2264.019487] ? generic_file_read_iter+0x330/0x550 [ 2264.020133] ? generic_file_splice_read+0x1bc/0x4d0 [ 2264.020768] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2264.021439] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2264.022133] ? inode_security+0x105/0x140 [ 2264.022711] ? security_file_permission+0xb5/0xe0 [ 2264.023354] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2264.024036] direct_splice_actor+0x113/0x180 [ 2264.024619] splice_direct_to_actor+0x33a/0x8c0 [ 2264.025241] ? __pfx_direct_splice_actor+0x10/0x10 [ 2264.025896] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2264.026569] ? security_file_permission+0xb5/0xe0 [ 2264.027246] do_splice_direct+0x1bc/0x290 [ 2264.027789] ? __pfx_do_splice_direct+0x10/0x10 [ 2264.028413] ? lock_is_held_type+0xdb/0x130 [ 2264.029002] do_sendfile+0xb1d/0x1280 [ 2264.029543] ? __pfx_do_sendfile+0x10/0x10 [ 2264.030132] __x64_sys_sendfile64+0x248/0x2a0 [ 2264.030737] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2264.031398] ? syscall_enter_from_user_mode+0x21/0x50 [ 2264.032079] ? syscall_enter_from_user_mode+0x21/0x50 [ 2264.032780] do_syscall_64+0x3f/0x90 [ 2264.033292] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2264.033976] RIP: 0033:0x7fdaf7a13b19 [ 2264.034463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.036692] RSP: 002b:00007fdaf4f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2264.037661] RAX: ffffffffffffffda RBX: 00007fdaf7b26f60 RCX: 00007fdaf7a13b19 [ 2264.038564] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2264.039476] RBP: 00007fdaf4f891d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.040377] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2264.041279] R13: 00007ffeb2abfaef R14: 00007fdaf4f89300 R15: 0000000000022000 [ 2264.042209] [ 2264.148123] Buffer I/O error on dev loop6, logical block 10, async page read [ 2264.149317] Buffer I/O error on dev loop6, logical block 10, async page read [ 2264.170971] Buffer I/O error on dev loop6, logical block 10, async page read [ 2264.193019] loop5: detected capacity change from 0 to 40 [ 2264.226835] loop4: detected capacity change from 0 to 40 22:17:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:17:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4440, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 91) 22:17:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:15 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:15 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400000, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000008000000002e2f66696c653000cc9863116038a55841fd85213e7fe15b773e333637aaa3fb49844dcf7ad0c9e4edd92e99cc9a1ee65e8e5e5c7e0840d02e26ce22ae07709c9dbf86ea3922f1a5f22052439aa572528dd2b4d8fe98d5ee224fa3959d13dd239640df2ed89402566c7ca0f2c35272f341458f69f0bdc1a7cd070000007b7a3e72e7e20defa212581614b804b006f0a6242bd65ef726c0af53f55f139b490a4d4933575e81b99df70d1ae582c5345d3856c153c878f6a77748fad7d86174aac58f8bf2136ada5c194d557a02bbf81c4cdb8c23c486594820b824b54979b9eb65c9cbed11359b11ce9d"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) fcntl$getown(r3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r5, r3, 0x0, 0x3492) [ 2277.652352] loop2: detected capacity change from 0 to 40 [ 2277.657991] loop5: detected capacity change from 0 to 40 [ 2277.660356] loop3: detected capacity change from 0 to 40 [ 2277.680963] loop0: detected capacity change from 0 to 40 [ 2277.707315] loop1: detected capacity change from 0 to 40 [ 2277.711511] loop6: detected capacity change from 0 to 40 [ 2277.756482] bio_check_eod: 10 callbacks suppressed [ 2277.756496] syz-executor.2: attempt to access beyond end of device [ 2277.756496] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2277.757765] buffer_io_error: 6 callbacks suppressed [ 2277.757774] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2277.774224] syz-executor.1: attempt to access beyond end of device [ 2277.774224] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2277.791050] syz-executor.6: attempt to access beyond end of device [ 2277.791050] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 22:17:15 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2277.859411] syz-executor.6: attempt to access beyond end of device [ 2277.859411] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2277.861484] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x88400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v1={0x1000000, [{0x80000000, 0x4}]}, 0xc, 0x3) sendfile(r4, r5, 0x0, 0x7fffffff) 22:17:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2277.977333] loop3: detected capacity change from 0 to 40 22:17:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 92) 22:17:16 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r6 = getpid() execve(&(0x7f0000001580)='.\x00', &(0x7f0000001640)=[&(0x7f00000015c0)='/dev/net/tun\x00', &(0x7f0000001600)='i\x02[&{\\*$[\x00'], &(0x7f0000001780)=[&(0x7f0000001680)='//\xab)\\{\x00', &(0x7f00000016c0)='/dev/net/tun\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\'[+\'\x00']) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r6, 0x0, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendmsg$unix(r4, &(0x7f0000001500)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000240)="582605c1fce525e38ee75540a025f52dc200db364ffbcbf9767e86235e7746d2469e5485ad508cdfd55205146e1dd77dfddf3a44543d292ff563020ff73d442d274159c8e4cd6a309cc5d7987b7ee90ebcef6fb01e33394adf816bbfe27ac9ab23a035d6f936df9921cd8ed6bf5fd592075600a46c74a109532d445e63b8695affb82a03f19f20fb390714e3042cfcaaf4e872d114f900f02439102ac2ce093cc5b59c42e336ebfe11c1363e8d77b637f2dcc34a8fd7d45938abde538a14d82ad46a602aad", 0xc5}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000000c0)="635b197f6a395c31998d72827886455a6a8af98150eab381aa8f0bed5dfc40ed1517715615d4d83af977bfcc9961de91822f91e4edece9816dc48680", 0x3c}, {&(0x7f0000000180)="71848ed25bbc95116f2a163bda9f6ab782f79cc6ec8ef56381e8efb3e1c9bc6ee26a4e46e5e17b9270d4b450c9f441ebdf40f3dbddb91009d1c41e3a5bbd2913644694f3d462c7b6d2107e7dd218ae5b00380991a9ba69f8de867429d110d0cb7c41e3", 0x63}, {&(0x7f0000001340)="04e44b883caa8df11557fcce665373b3bd6f6eba6c4af089a0b97d7a777eb1f81f5dcd1c2700148d369651833f8e066b15cced9b0d482798cdaced6975a707ec521e5f1fcc7be1d1445a927b94b6d97eee54c60d8c54907223d7a428fc2455d59fb3d81d000a8d27a05e04f780c0e3542bbd74a5d920728699cdb9bd1f00db902a2ead2b94b960dd3442c40f11b86170c1a782d3ba45b9d37f7eeaf69167bb439b39d1dffbd09bc46d881e1db1ef9afd904d638170301e", 0xb7}], 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="2c00020021000080010000000100000041ed17", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x1}, 0x24000810) open(&(0x7f0000001540)='./file1\x00', 0x440140, 0x40) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2278.087372] syz-executor.3: attempt to access beyond end of device [ 2278.087372] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2278.088873] Buffer I/O error on dev loop3, logical block 10, lost async page write 22:17:16 executing program 6: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2278.119160] loop2: detected capacity change from 0 to 40 [ 2278.120279] loop1: detected capacity change from 0 to 40 [ 2278.129179] loop5: detected capacity change from 0 to 40 [ 2278.145129] loop0: detected capacity change from 0 to 40 22:17:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2278.231560] syz-executor.1: attempt to access beyond end of device [ 2278.231560] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2278.235894] syz-executor.0: attempt to access beyond end of device [ 2278.235894] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2278.239721] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:17:16 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2278.311150] loop3: detected capacity change from 0 to 40 [ 2278.318655] syz-executor.2: attempt to access beyond end of device [ 2278.318655] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2278.320270] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:17:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7fffffff) [ 2278.344081] syz-executor.0: attempt to access beyond end of device [ 2278.344081] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2278.345709] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2278.562735] loop1: detected capacity change from 0 to 40 [ 2278.686289] syz-executor.1: attempt to access beyond end of device [ 2278.686289] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 22:17:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="5fb97eeca4c880c8c9161cfbb1cd1b6fe338f792a1fc7d9be79a3d892ff406b8d096945e7907d5dad85b5f76b729196fdd75ff23c4cbdf32aa57007015ea91537c088ec8087a71a6a35b209f4453209261ba261ec40ff587bb27e61abc5021a70481be65cb8884a78042b8d692163e024bacd741f35dccd73c93618cadd0a7ae6ad09dba4e3fc3321ab7295b5162904320deb7c57a3d7f6bb3", 0x99}], 0x1, 0x1, 0x5af) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U+'}, 0x16, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) chmod(&(0x7f0000000180)='./file0\x00', 0x382) 22:17:31 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x4c) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x270400, 0x106}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) write$binfmt_aout(r3, &(0x7f0000000240)={{0x107, 0x81, 0x7, 0x117, 0x3d1, 0x1, 0x115, 0x4}, "84ba3b93d15e62ba6798f136a84dc32f5bb732e9dfd55fb52ce9d7eb59fb11fb3ceff7879502ad1f6051e351f69e5682a1a82fa46934a44ffe15f878f1cc1aea90557d0c1888cb8c68445a7d9c9647f4c6d6ec5197db8ab9596691b07e1fd2c4a796d8875b3f6d7bedf10e42cfbd1bab60e8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x692) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 22:17:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:31 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffffffbd, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="bea9678722a46581b3ea3d20d69d24aaf55e1ca509c9485729b8237d92c0d6cd9e408f7e7c5acc0146a1da99e501d9b352d4b6cf5c547e043ced7c18d2558005871bd8b0a2d7753dddbd7de93e9aedb46719e4366966f993a8697ebbb3efdee28a95e00c97b75d6439fa82a116f14fe09a664c4eb0eb99ea2693bb7840e3db0256c50966ff0bf79e580aed7659d6d677d989eba1ffe3bceb32470ff785e3792ac7b3e0f22b800ef4d5f16b74289d18d8006087fdbcfbada29de9c51059f421e343d27348697698a09e7daac7d68197fa014a4ef3b68f82c65ddfec796def3681", 0xe0, 0x401}], 0x800, &(0x7f0000000400)={[{@dots}, {@nodots}, {}, {@nodots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@usefree}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^{.+\\{*)%-%()*$'}}]}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind(r3, &(0x7f0000000180)=@llc={0x1a, 0x990e7fb793c5710e, 0x1, 0x3f, 0x40, 0x1f, @random="2909d343090c"}, 0x80) 22:17:31 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 93) [ 2293.562826] loop4: detected capacity change from 0 to 40 [ 2293.565442] loop6: detected capacity change from 0 to 40 [ 2293.572813] loop1: detected capacity change from 0 to 40 [ 2293.585940] loop3: detected capacity change from 0 to 40 [ 2293.600052] syz-executor.6: attempt to access beyond end of device [ 2293.600052] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2293.632068] loop2: detected capacity change from 0 to 40 [ 2293.638213] loop0: detected capacity change from 0 to 40 22:17:31 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4340c0, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2293.696109] syz-executor.1: attempt to access beyond end of device [ 2293.696109] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2293.735713] loop4: detected capacity change from 0 to 40 [ 2293.738152] syz-executor.2: attempt to access beyond end of device [ 2293.738152] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2293.738921] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:17:31 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 94) [ 2293.809039] loop6: detected capacity change from 0 to 40 [ 2293.829357] syz-executor.0: attempt to access beyond end of device [ 2293.829357] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2293.831124] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:17:31 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2293.871010] syz-executor.0: attempt to access beyond end of device [ 2293.871010] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2293.871978] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2293.908249] loop4: detected capacity change from 0 to 40 [ 2293.931566] loop2: detected capacity change from 0 to 40 22:17:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2293.983233] syz-executor.6: attempt to access beyond end of device [ 2293.983233] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2293.985007] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:17:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x7f, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000240)="de470f9ede1054eec6cf1cf51f07990fe6631a9aa4276a85701e8fcbf403b9b74273724efd146ce28a401bc272386569b61bd62c1065ec2e3498254831bd61977baf3c548d42cb8386430cd974ccbe8a52c40fd6bd9aa08b76b390363bc9aa33c7bdfa91d0736542f97702251bced0417308019614ffc2f9e969b7cd1220f91664e7f5a88909237343015d59d6d7d71d51d9b93f3523cbc2a63485abd2591dd49ca4dad6cfbb426c", 0xa8, 0x2d4}, {&(0x7f0000000300)="531f19dd16a4d10d2bb4e8a4c2538718a51f563a9b995f1ef674ea6ddca4b2b3b8951dd3318e4a00008e1ea82a18c81477dff8f383eda4c764c70a0f2dfb5422f28eca59dc179c1ba61cc0614f924229757baaa24f05587a640224f5c0780596f21af2c8ec580fe8a0f284031e49cd920f76d7ca830a2f87ba8442eda7faa513df264017b42f1ab14a5f681cc68f6369b8370de6502f4aadd04e463d8f6d6e6f1108d163eb9213c8bfa4f9456ef344e6f72e8dc7a6526ee0b3c9104c5e56e9589fc3292193763a9b3603ade033c48cb6fcf494fe8e779ee60a", 0xd9, 0x80000001}, {&(0x7f0000000400)="647446549c4831c76c16d02079650837787e14d04141b78d1da221b4cbf7210ca3f825f08668fed750839c7ea8ef6fe1930eb8c33631b04a5b22e3a3cb52eaa055fb9ad5b863723aa5af498a897cd2b66393f747c2210f049162dcfa62c00f9c97eb5bde2c02a788f4ab3e49549a8b26dfb16d8134fc2eff4d4cb89f78ce830135f60cc3bd7a39bb86383234da22925af361624634a8b9307377293aca6e018d258af38cdd7390c7a6aa8621170159dff0b65353e0493b4266922b599867f53e1bf0f4b8c0aada1690c2e66db57d0def182652b1612fbddfab925554565f809c55f74d1770feaca7cdc903a1c95ca7", 0xef, 0x800}, {&(0x7f0000000500)="3c1349e9e063e30d5a802dc30fc32f3cb88c51c7c00c896b3130f7cd97a821a5932ba122e5893cc5d118098a84d277f357c7d6e872c588f17f083b1e68898e19a521c40f86aa8583e05507a22ceeffc36b5539478bc1fb74aa796fded716bc49117ccc9a6442bb07da2f559d7c48cde25eaf36789e3c96df57d95705fd72a1a2122fc1f323a7baa403f5563e8f60b116a4109f40b81eedd93bd18f6be2b3ee232863dde4e893b8af2d", 0xa9, 0x6}, {&(0x7f00000005c0)="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", 0x1000, 0x7}, {&(0x7f00000000c0)="56d1d03e6d087318702279f8383a123586c7d8115dc7201ac10332c5430bb6c5ff1125d6f15ab24c150b782c886b58be3619", 0x32, 0x6}, {&(0x7f0000000180)="8b8230235289a800d89a87e03f396166b213c3265e5a8fe6414e08efa5213af389c06b17fdb7006f2a6eeb70595b92d7173226a9b6f6e3d44b08f3eb7950b835eb08017f00219a78832fa08f87780bd633edc5daedd8fb93638b7737f929eff4881d28227ae0ccbe96fc266a42e2de341d3767e8a9ff9ebbdd0e4547ea54cd", 0x7f, 0x3}], 0x0, &(0x7f0000001680)={[{@nobh}, {@bh}, {@errors_continue}, {@abort}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2294.012641] syz-executor.2: attempt to access beyond end of device [ 2294.012641] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2294.013486] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:17:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:32 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, &(0x7f0000000240)=0x8000, 0x10001) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) sendto$unix(r3, &(0x7f0000000040)="c949a205c2c1f4b41460bebe2b2b3f58698117f4f2f296b2836b240d634da8060efc76d34a3cd1df2deb9c1805a4193215236a72ba02bc175975d17a1fd0b8fb1f7c6385a865c2f02ef3b402f76a7bd94f050b37fdf26c642fcffb912e50683dd00397ca784aaa89bf14376b3519ad00443e02be2f94d79485f1ae4f", 0x7c, 0x2, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x20000, 0x16) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2294.041847] loop1: detected capacity change from 0 to 40 22:17:32 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2294.146397] loop3: detected capacity change from 0 to 40 [ 2294.154994] loop0: detected capacity change from 0 to 40 [ 2294.168668] loop4: detected capacity change from 0 to 40 [ 2294.190837] syz-executor.1: attempt to access beyond end of device [ 2294.190837] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2294.286644] syz-executor.0: attempt to access beyond end of device [ 2294.286644] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2294.287454] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:17:45 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = dup(r0) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000f7030c004eb9d2d369000029bd7004ffdbdf25070000000700d20800696c65302e2f0000"], 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x4008000) 22:17:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x14242, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2308.001479] loop5: detected capacity change from 0 to 40 22:17:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 95) 22:17:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:45 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x111042, 0xa) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) [ 2308.006767] loop6: detected capacity change from 0 to 40 [ 2308.021683] loop2: detected capacity change from 0 to 40 [ 2308.030645] loop1: detected capacity change from 0 to 40 [ 2308.057552] syz-executor.2: attempt to access beyond end of device [ 2308.057552] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2308.058481] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:17:46 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2308.086375] loop4: detected capacity change from 0 to 40 [ 2308.091917] loop0: detected capacity change from 0 to 40 22:17:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 96) [ 2308.096098] loop3: detected capacity change from 0 to 40 [ 2308.097664] syz-executor.6: attempt to access beyond end of device [ 2308.097664] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2308.099352] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2308.156402] loop5: detected capacity change from 0 to 40 [ 2308.175430] loop2: detected capacity change from 0 to 40 [ 2308.193218] syz-executor.0: attempt to access beyond end of device [ 2308.193218] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2308.194855] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2308.221538] syz-executor.2: attempt to access beyond end of device [ 2308.221538] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2308.222533] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:17:46 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2308.257902] syz-executor.0: attempt to access beyond end of device [ 2308.257902] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2308.259529] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:17:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 97) 22:17:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)}, 0x10001) chdir(&(0x7f0000000140)='./file0\x00') syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/4096, 0xfffffffffffffeaa}], 0x2}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index, 0x1, &(0x7f0000000180)="422ae5b984ac391301c544ca76fa8fbd8aab32bc3603f51abf06fe4e52dee0377765e11d4fb8fd5adf393fafa79f804eeb4cf06b3df69b11893bcec052e344d29381b355bc19134d07acf7cf5147ae8f262f0468fa58797c7563659baed32f2f7afaf3736b603421bdff866bdd704b0ca0b2877d23cde7", 0x77, 0x18, 0x1}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2308.347665] loop2: detected capacity change from 0 to 40 [ 2308.389402] loop1: detected capacity change from 0 to 40 [ 2308.390001] loop6: detected capacity change from 0 to 40 [ 2308.433411] FAULT_INJECTION: forcing a failure. [ 2308.433411] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.434320] CPU: 0 PID: 12016 Comm: syz-executor.2 Not tainted 6.1.0-rc7-next-20221205 #1 [ 2308.434897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2308.435479] Call Trace: [ 2308.435675] [ 2308.435839] dump_stack_lvl+0x8f/0xb7 [ 2308.436137] should_fail_ex.cold+0x5/0xa [ 2308.436448] should_failslab+0x9/0x20 [ 2308.436737] __kmem_cache_alloc_node+0x5b/0x400 [ 2308.437086] ? iter_file_splice_write+0x169/0xcb0 [ 2308.437452] ? iter_file_splice_write+0x169/0xcb0 [ 2308.437588] loop4: detected capacity change from 0 to 40 [ 2308.437793] __kmalloc+0x46/0xc0 [ 2308.437817] iter_file_splice_write+0x169/0xcb0 [ 2308.439065] ? generic_file_read_iter+0x330/0x550 [ 2308.439436] ? generic_file_splice_read+0x1bc/0x4d0 [ 2308.439794] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2308.440198] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2308.440691] ? inode_security+0x105/0x140 [ 2308.441014] ? security_file_permission+0xb5/0xe0 [ 2308.441377] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2308.441757] direct_splice_actor+0x113/0x180 [ 2308.442083] splice_direct_to_actor+0x33a/0x8c0 [ 2308.442429] ? __pfx_direct_splice_actor+0x10/0x10 [ 2308.442792] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2308.443170] ? security_file_permission+0xb5/0xe0 [ 2308.443533] do_splice_direct+0x1bc/0x290 [ 2308.443850] ? __pfx_do_splice_direct+0x10/0x10 [ 2308.444196] ? lock_is_held_type+0xdb/0x130 [ 2308.444525] do_sendfile+0xb1d/0x1280 [ 2308.444831] ? __pfx_do_sendfile+0x10/0x10 [ 2308.445166] __x64_sys_sendfile64+0x248/0x2a0 [ 2308.445502] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2308.445865] ? syscall_enter_from_user_mode+0x21/0x50 [ 2308.446245] ? syscall_enter_from_user_mode+0x21/0x50 [ 2308.446630] do_syscall_64+0x3f/0x90 [ 2308.446913] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2308.447300] RIP: 0033:0x7fdaf7a13b19 [ 2308.447583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.448859] RSP: 002b:00007fdaf4f89188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2308.449398] RAX: ffffffffffffffda RBX: 00007fdaf7b26f60 RCX: 00007fdaf7a13b19 [ 2308.449886] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2308.450391] RBP: 00007fdaf4f891d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.450879] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2308.451396] R13: 00007ffeb2abfaef R14: 00007fdaf4f89300 R15: 0000000000022000 [ 2308.451937] [ 2308.503159] syz-executor.6: attempt to access beyond end of device [ 2308.503159] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2308.504843] syz-executor.6: attempt to access beyond end of device [ 2308.504843] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2308.505863] Buffer I/O error on dev loop6, logical block 10, async page read [ 2308.506549] syz-executor.6: attempt to access beyond end of device [ 2308.506549] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2308.507542] Buffer I/O error on dev loop6, logical block 10, async page read [ 2308.513460] syz-executor.6: attempt to access beyond end of device [ 2308.513460] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2308.514461] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(r1, &(0x7f0000000040)='./file2\x00', 0x200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7fffffff) 22:17:58 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 98) [ 2320.688126] loop1: detected capacity change from 0 to 40 [ 2320.691231] loop3: detected capacity change from 0 to 40 22:17:58 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:17:58 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendfile(r0, r3, 0x0, 0x8) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2320.699112] loop5: detected capacity change from 0 to 40 [ 2320.715878] loop2: detected capacity change from 0 to 40 [ 2320.728900] loop0: detected capacity change from 0 to 40 [ 2320.738617] loop7: detected capacity change from 0 to 40 [ 2320.741678] loop6: detected capacity change from 0 to 40 [ 2320.769712] syz-executor.2: attempt to access beyond end of device [ 2320.769712] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2320.770550] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2320.803056] syz-executor.6: attempt to access beyond end of device [ 2320.803056] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.804435] syz-executor.6: attempt to access beyond end of device [ 2320.804435] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.805495] Buffer I/O error on dev loop6, logical block 10, async page read [ 2320.813373] syz-executor.6: attempt to access beyond end of device [ 2320.813373] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.814297] Buffer I/O error on dev loop6, logical block 10, async page read [ 2320.828204] syz-executor.0: attempt to access beyond end of device [ 2320.828204] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2320.829830] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2320.834104] syz-executor.6: attempt to access beyond end of device [ 2320.834104] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.836060] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:17:58 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000600)="601c6d6b646f7366d8a02b00080101000440002000f801488493522109e860e5578638e1d93875b1a3f6242a29a3ffd4b11c6d3f3723a3d735cda02fbb0f0d1943969b5f31092a5ddab522131dcfbd13e4bd32fadf91b362bafd5c2aac51a91cc93f3988fc92fdf1fbaa482c41005280069b63f66b04cdb61769e79f21f032d6748e1d588e269ce9d1cb9d71e64aab8780457027c3", 0x95}, {0x0, 0x0, 0x363}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') openat(r0, &(0x7f00000006c0)='./file1\x00', 0x220000, 0x115) chroot(&(0x7f00000001c0)='./file2\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x106) linkat(r2, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00', 0x1400) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="13d529a6dfc47439e450c7f30615a40e2bc8ef7caeca66ca2d109a1dd2b554c2d14baa1cc786fbe3c2335a74ada389b724acd3fd5320e75e65b680658868153d93c23c1ba5c7f7f1140b57856016ddc5a74bb11f3047b6612cbede12c29bb77150f95f39cc328301e2b6b259e71e453c41d4b6de47946904a36b7e3419878aab57307026e2b1fc12b3456a83f84a6b2124d50b050695c4585e77b2575a11c7b4d1e95ec773029e0e1db0037932ffcce5fafb53447c77948ea453a06637", 0xbd}, {&(0x7f0000000300)="6f32f2af27d7452b3f8501e948fb4b8fb81b0297", 0x14}, {&(0x7f0000000340)="7a8aac333ceacaa1b9f5f8060d5f4e7a071586f7bfa41e4509237ecfe9d5ad28e33e0b008b4b96ad2d0f8d23e8e27a8ae010580163ce", 0x36}, {&(0x7f0000000380)="32e80b79e583fc0c3eae3b832a09ec173f60a1ed9b385e5909091a52defefdc92d53e81f870b27c9f2c1691b5771832976180122308f697036b115139ea163ac32997986cb8b6210e4a99c9582c6329439223dfc2f2925ffbf55d800e1365594cc3abc7ec67e38699777bc5e", 0x6c}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="df76568405c161fa9cf1eb6a027e562379536f7e38864a121312c3b82238300d81cab266cc00", 0x26}, {&(0x7f0000000540)="4d9d18a6eb36f2ea6f8b1bac", 0xc}], 0x7, 0x2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x301040, 0x0) [ 2320.872276] syz-executor.6: attempt to access beyond end of device [ 2320.872276] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.873148] Buffer I/O error on dev loop6, logical block 10, async page read [ 2320.877092] syz-executor.6: attempt to access beyond end of device [ 2320.877092] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.877947] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2320.895111] syz-executor.6: attempt to access beyond end of device [ 2320.895111] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.895955] Buffer I/O error on dev loop6, logical block 10, async page read [ 2320.900109] syz-executor.6: attempt to access beyond end of device [ 2320.900109] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2320.901034] Buffer I/O error on dev loop6, logical block 10, async page read [ 2320.906051] Buffer I/O error on dev loop6, logical block 10, async page read 22:17:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:17:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 99) [ 2320.972109] loop3: detected capacity change from 0 to 3 22:17:58 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1/file0\x00', 0x10000, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="f5dc59d4588834ce08747c1c717153737f9467d9a10d6adb8da7657631acf8d596d2b0c80681dd203282a8fbf5e7e2c4340b9286a3bd6cac9217cadb6d1a7eff832f29e2a449ce8d42c220020416da1d316ba9a299a4e938260d4accdeee0491f0ebf2fdabf8724a6d533edfc4b3d5bb8cba8bed3902a2d84a939d2d58099298171547e144b3c51c7298d7004f2c69f4e8482b58ab487b8f521a8dfb99c8c30413c8f98894275a4a4183df9b42fa8a5f5e6919d3e08bf9ff2e13151ac43e721c2907547c22eef4b63d3279218aa110c5df8a", 0xd2, 0x100000}, {&(0x7f0000000340)="4efc4ab6e31a200ce5970e3ed005031a06669aa62cc130bb30c5e269d7237200099481d1486f5158778716592ce31bf503a5edcea85681fe2af5b531167f1e9ed5526c33b06ac8efb712c45023f3b253844be74012dde980c78aa669e6f5791e4701f5ca12b740f1652787ea619354b13617d4c5c56c6d2d73fa355822dac9cb66a4e41fdaa36bb40d54c7d53531c6e1b97d27557317e96dced8d924346e6f722b12d63322ef2d8c85b7d7c9ab51c7f8146f82ee4c1dc44e5ae20af790926c27948afb5f262beb3d4618b147cae131fbc473ffa9e154ccc65367cd67", 0xdc}, {&(0x7f0000000440)="ebf59d55052b5c1c5aba511258e8ad45f2c7d8421ba283cee5c30884e00947b9a579c0380402510c71924250430cc9f63d294e7a542da29794aaad764e27a6182124508e17f513a369a10384f00048043d0345166bfa4be7a3d1b10c696ca5f131258827042c5344d7740e436c615919859410d2b549fd88c2efd26bbcef93af7b867d5663096befbd64960859df35", 0x8f, 0x98e}, {&(0x7f0000000180)="07967520e8146aa6bba1c64185fc2e03609657e63dd8f7579f6e0a44551abfa262dd", 0x22, 0x20}], 0x4000, &(0x7f0000000580)={[{@shortname_winnt}, {@utf8no}, {@fat=@errors_continue}, {@shortname_mixed}, {@uni_xlate}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_measure}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@appraise}, {@uid_gt}, {@dont_measure}]}) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x3f7, 0x10, 0x70bd27, 0x25dfdbfe, {0x7, 0xd, './file1', './file1/file0'}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$binfmt_aout(r4, &(0x7f0000000680)={{0xcc, 0x3, 0x3, 0x2b0, 0x11f, 0x0, 0x178}, "7c5605a536f2c56bc5f8e9c9b02a012cffad5815f3cdc95a3f099843c9df0fdb206757aedf4305c1fb2dd0f108aa36dbf0bbf546697e798f2ba035fba805222e5730d936afd97035a5539a3f311c6979360432554be6ee8a099d6dc61270fb24d87a3b957ff854c4543bf75b15a4fa65771e58e1aaf12fba38f3e8f3df38788a01bd976f4cdb48b3422f231dfe8ecfad384335531e52b77b6cb20631fcd82d0e613f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c2) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r5 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="40042cbd7000fddbdf2506000000080034000180ffff0500ff010000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0x820) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000010c0)={'ipvlan0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x7fffffff) sendfile(r3, r1, 0x0, 0xfffffdef) [ 2320.978639] loop5: detected capacity change from 0 to 40 [ 2320.982403] loop1: detected capacity change from 0 to 40 [ 2321.004436] FAT-fs (loop3): unable to read boot sector (logical sector size = 2048) [ 2321.006712] loop2: detected capacity change from 0 to 40 22:17:58 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x442, 0x1) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2321.027071] loop0: detected capacity change from 0 to 40 [ 2321.091667] loop3: detected capacity change from 0 to 3 22:17:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2321.103010] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 2321.117366] loop6: detected capacity change from 0 to 40 [ 2321.157606] loop0: detected capacity change from 0 to 40 22:18:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2334.208717] loop5: detected capacity change from 0 to 40 [ 2334.210374] loop6: detected capacity change from 0 to 40 22:18:12 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f, 0x5, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000040)="af130084a0b7f52ccca6489022118b505702e60b8810ac21a825de993a3015784fb5f6154531a1ed24ba674a3f3bcf3a97789813d492110086cc1c7d5a393e9abd2b5210acfcc244ad9483afead275c451cfa9a29cf8bd3120da4098680bd6074ea1c513b686f4fe22990d7bf851b21b467e841b12b53a6535c8474aa42ccb727a258cf5b1ee2aa0a40f28f5d62dc0bbda5801513fba27990d00e636b3d6", 0x9e, 0x10000}, {&(0x7f0000000240)="b77671ed084b8d47b536dc97b414315038250d7d626392df4a3bb23c021a4121ca062ed1e7bab395000aa6b83930890611f8e555c5de02864d2b402cfa453f49ff91b21beb9ed529634e9746399caca4980f2c35592806d89e627430e0c6a6c96db82355a3487cbaa7f6354ce25dd82ca6d0c3cb73bac6106001736f2643abb4835676c50e554a3d2ebbe65156474f5cffc8dadd7b680ff8e31f54aa93f3664573bba2955c96e336d098ae27fd59d93dc2962d9a1e12e03d799107e612", 0xbd, 0x81}, {&(0x7f0000000300)="c199fca3387291b0286c3eaaa91a52ec20155780efc301d976d042bccc9950db3cf34e5ebe1cdb46476f59ee2895897b3cfa6babbc2c1d497e898f35d00caf76d7569b495cf5950a30e309bb6d0c1dcff72486caf4daadef39573f3682372ab40d46dd70b57ad2e1aa6eac1ec235df2996393dcd46222dd93f2bfc92bd0d7b2738886bb0d13b7d77376f5a41fc5bfe0b7eaea9d363c0b1f4e07fa1bbffe411037a1aab640e0a6c412fb15c4db47307b9f263e70cc0e7", 0xb6, 0x9}], 0x2000000, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48042, 0x56) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:18:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 100) 22:18:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2334.227521] loop2: detected capacity change from 0 to 40 [ 2334.231387] loop0: detected capacity change from 0 to 40 [ 2334.234379] loop1: detected capacity change from 0 to 40 [ 2334.276529] bio_check_eod: 10 callbacks suppressed [ 2334.276541] syz-executor.2: attempt to access beyond end of device [ 2334.276541] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2334.277778] buffer_io_error: 8 callbacks suppressed [ 2334.277787] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2334.279264] loop3: detected capacity change from 0 to 256 [ 2334.280658] FAT-fs (loop3): Unrecognized mount option "¯" or missing value [ 2334.281590] loop7: detected capacity change from 0 to 40 [ 2334.290494] syz-executor.0: attempt to access beyond end of device [ 2334.290494] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2334.291462] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2334.298937] syz-executor.6: attempt to access beyond end of device [ 2334.298937] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.313023] syz-executor.6: attempt to access beyond end of device [ 2334.313023] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.313901] Buffer I/O error on dev loop6, logical block 10, async page read [ 2334.314571] syz-executor.6: attempt to access beyond end of device [ 2334.314571] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.315520] Buffer I/O error on dev loop6, logical block 10, async page read [ 2334.321855] syz-executor.6: attempt to access beyond end of device [ 2334.321855] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.322614] Buffer I/O error on dev loop6, logical block 10, async page read [ 2334.328079] loop3: detected capacity change from 0 to 256 22:18:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) [ 2334.335155] FAT-fs (loop3): Unrecognized mount option "¯" or missing value [ 2334.336504] syz-executor.6: attempt to access beyond end of device [ 2334.336504] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.337491] Buffer I/O error on dev loop6, logical block 10, async page read [ 2334.343690] syz-executor.6: attempt to access beyond end of device [ 2334.343690] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.344754] Buffer I/O error on dev loop6, logical block 10, async page read [ 2334.347575] syz-executor.0: attempt to access beyond end of device [ 2334.347575] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2334.348440] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2334.357834] syz-executor.6: attempt to access beyond end of device [ 2334.357834] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2334.358650] Buffer I/O error on dev loop6, logical block 10, async page read 22:18:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2334.440514] loop2: detected capacity change from 0 to 40 22:18:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000080)=0xfe, 0xf419) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2334.469684] loop1: detected capacity change from 0 to 40 22:18:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) lseek(r3, 0x8, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000000c0)) sendfile(r2, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) chroot(&(0x7f0000000040)='./file1\x00') 22:18:12 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x1, {0x1, 0xffffffffffffffc1, 0x0, 0x8, 0x4}}) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x185042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) [ 2334.528653] FAT-fs (loop4): bogus number of reserved sectors [ 2334.529783] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2334.530381] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2334.597066] loop0: detected capacity change from 0 to 40 [ 2334.617549] loop3: detected capacity change from 0 to 40 22:18:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x141200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x180) [ 2334.649220] loop6: detected capacity change from 0 to 40 22:18:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2334.847231] loop2: detected capacity change from 0 to 40 [ 2349.290657] loop6: detected capacity change from 0 to 40 22:18:27 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:18:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file1', [{0x20, 'vfat\x00'}, {0x20, '.\x97'}, {0x20, '2#'}, {0x20, '.['}, {0x20, '\x88(}'}, {0x20, 'vfat\x00'}], 0xa, "4d1010c8c99727e1c99521b25950b9d81cfee420946a44791a05644f0f62ed63f60ecd40e70c1acf45b66d843fbbf43fbd3844e5b912b5be32913255f163a1c43d5a3097a2c942712d3079ae87460955717e577f7c1700b609fc42b1330ddc6bd9939e97028779e1fe560fa62df0dedbddf8b768a0bcb424ca1e63959fa0701e4ad6e5475ff21223df137762df7102398fe028f553a35cb4a728de05250f184314a367824aedefb8b682fe435f9ca3d8aa82c7c09ede7e8e85e8bae0434921a4384b1d86baecbb5d941afe8d"}, 0xf0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000740)={0xb0, 0x0, &(0x7f00000005c0)=[@acquire={0x40046305, 0x2}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x7, 0x2, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x11}, @fda={0x66646185, 0xa, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/160, 0xa0, 0x2, 0x2e}, @fda={0x66646185, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x89, 0x0, &(0x7f0000000680)="3f9c6dc6ac03efa05aa53ec50a92d6c000393661287c69e5462a0e3c1f91e7e5a3c8b2f6356fd3ba3445e5ca552a671f47085e34594dfb894b9c13088b91f5420142b808e25eb7f77a935da063ce54da9d2724d28139e3fdc716b4002cf9ff1545dd3bacb47f23041c2891ab20cf2aaf7401678b70398e1410e9667b59b0e5b7c880a5985bcd76b8e6"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="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"]) sendfile(r0, r1, &(0x7f0000000040)=0x9, 0xff) sendfile(r3, r6, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:18:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x303ac2, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x9, 0xadc, 0x401}) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:27 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 22:18:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:27 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r2, 0xe1, 0x8000, 0x3}) openat(r5, &(0x7f0000000080)='./file1\x00', 0x280c80, 0x42) sendfile(r2, r1, 0x0, 0xfffffdef) 22:18:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2349.310505] loop7: detected capacity change from 0 to 40 [ 2349.312435] FAT-fs (loop4): bogus number of reserved sectors [ 2349.312949] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2349.325230] bio_check_eod: 11 callbacks suppressed [ 2349.325263] syz-executor.6: attempt to access beyond end of device [ 2349.325263] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.334939] loop1: detected capacity change from 0 to 40 [ 2349.366439] loop0: detected capacity change from 0 to 40 [ 2349.372981] loop2: detected capacity change from 0 to 40 22:18:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2349.415345] syz-executor.1: attempt to access beyond end of device [ 2349.415345] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 22:18:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2349.445319] syz-executor.2: attempt to access beyond end of device [ 2349.445319] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2349.446283] buffer_io_error: 9 callbacks suppressed [ 2349.446292] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2349.471127] syz-executor.0: attempt to access beyond end of device [ 2349.471127] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2349.472835] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2349.498145] syz-executor.2: attempt to access beyond end of device [ 2349.498145] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2349.499248] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:18:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2349.510502] loop3: detected capacity change from 0 to 40 [ 2349.547024] FAT-fs (loop4): bogus number of reserved sectors [ 2349.547477] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2349.547808] loop6: detected capacity change from 0 to 40 [ 2349.585502] syz-executor.6: attempt to access beyond end of device [ 2349.585502] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.589090] syz-executor.6: attempt to access beyond end of device [ 2349.589090] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.590956] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.592800] syz-executor.6: attempt to access beyond end of device [ 2349.592800] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.594444] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.607037] syz-executor.6: attempt to access beyond end of device [ 2349.607037] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.609047] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.621110] syz-executor.6: attempt to access beyond end of device [ 2349.621110] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2349.622015] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.623315] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.633086] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.637592] Buffer I/O error on dev loop6, logical block 10, async page read [ 2349.637943] loop1: detected capacity change from 0 to 40 [ 2349.731045] loop3: detected capacity change from 0 to 40 [ 2349.732081] FAT-fs (loop3): Unrecognized mount option "" or missing value 22:18:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/4096, 0xfffffffffffffeaa}], 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r3}}, 0x3) symlink(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='./file0\x00') r4 = syz_mount_image$ext4(&(0x7f00000014c0)='ext2\x00', &(0x7f0000001500)='./file1\x00', 0x3ff, 0x4, &(0x7f0000001780)=[{&(0x7f0000001540)="6c3181e550f4c88e45ab186d531bbde3ccfe8271b150bdb02529f5c68217ac1d9920ed0e9fde06b8", 0x28, 0x9}, {&(0x7f0000001580)="30c68efa2409d31cd207a4ecfcd30c2a65608e737a2e4d42af93549d109c894a8416874e93d7b21695f15d66dbd2219336532a0c4325befe72fdce40d1e3a1e1b4c2d2d12ddf113cf08a8304e4d223d9f229800a5ac5f7b8ba348bda94b13b7e9db9484f29388c676ac44068505c93df1d912299cbcab8af1632f8556abd2b2cc755e9820483f22d27d4277b76d8f28875b8a19328f7b83f9135c8577df657078ac2bb55e4a8a339544584c40c74f57cc1eff3646ce8650d3b0ed6b7df1504c9ab876dc370d05d49b5e70269c8183e5c2feed30073e86bca6e421a04cd", 0xdd, 0x1f}, {&(0x7f0000001680)='S', 0x1, 0x33}, {&(0x7f00000016c0)="5b779e71f288c50eed9ab22137ac8388e799029e66794c210331066bfb24adc76b2c52689730308c2f4c4c515106e5dd2fa9f459792cbc792b9ab4c40b665c83abcf36142b9f78c3628ad8a2302b8dc5190ac80d2556867c74edd754c04972f59a8cbff59c24d9161084ff14194c84f88be1cb156748cb7867e14b1ee4e69a69b5938452330e50757de1878045f743f1e5117653dacd996ee2c20631c9b1c3cc0b9e202496639475e4d10f9f4c", 0xad, 0x9}], 0x3, &(0x7f0000001800)={[{@oldalloc}, {@nouid32}, {@nogrpid}, {@bsdgroups}, {@minixdf}, {@noinit_itable}, {@init_itable}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x1}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_role}, {@obj_user={'obj_user', 0x3d, '\\%'}}, {@fowner_lt={'fowner<', 0xee00}}]}) pwritev(r4, &(0x7f0000001940)=[{&(0x7f00000018c0)="fb4f5e4ec4ceb78ba4980452c73918c5b2e4669aa992dce0c8e34689ed4d543f1921d9c860269d3e470b7f255f513ec05b5ae598522255470d8e3165c706b2b2c8673a0e4a602adaaa6df44abed7b3211827243f4fa952a7c67b5d29e88b7f9f2447d8ab5e39f7d6ac045d3e909f", 0x6e}], 0x1, 0x4, 0x50) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(0x0, r2, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)}, 0x0, 0x40002030, 0x0, {0x2, r3}}, 0xfffffff7) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffff) 22:18:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) dup3(r3, r4, 0x80000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1) sendfile(r4, r2, 0x0, 0xa00000) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:41 executing program 2: pivot_root(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0\x00') r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1000, 0x460101) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="20100000", @ANYRES16=r1, @ANYBLOB="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"], 0x1020}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101043, 0x86) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)={0x0, 0xfb, 0x1015, 0x2, 0x7f, "0a54f3302d5e5ab00fbf7c05ab4ed5c6", "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"}, 0x1015, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006"], 0x50}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x9001044}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6b}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2363.672424] loop2: detected capacity change from 0 to 40 [ 2363.679788] FAT-fs (loop5): bogus number of reserved sectors [ 2363.680249] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2363.681410] FAT-fs (loop4): bogus number of reserved sectors [ 2363.681850] FAT-fs (loop4): Can't find a valid FAT filesystem 22:18:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x6}, {0x0, 0x0, 0x2800}], 0x1168461, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2363.685291] loop6: detected capacity change from 0 to 264192 22:18:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:18:41 executing program 2: getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setregid(0xee00, r0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x149002, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = signalfd4(r1, &(0x7f0000000240)={[0x3]}, 0x8, 0x100800) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108}, r6, 0x0, r7, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r8}, 0x18, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x20, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}, {@cache_mmap}], [{@uid_lt}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r8}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r9, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2363.736257] loop3: detected capacity change from 0 to 40 [ 2363.737064] loop0: detected capacity change from 0 to 40 [ 2363.738535] loop1: detected capacity change from 0 to 40 [ 2363.743570] loop7: detected capacity change from 0 to 40 22:18:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2363.857183] bio_check_eod: 5 callbacks suppressed [ 2363.857207] syz-executor.1: attempt to access beyond end of device [ 2363.857207] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2363.874026] FAT-fs (loop4): bogus number of reserved sectors [ 2363.875012] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2363.886480] FAT-fs (loop5): bogus number of reserved sectors [ 2363.887497] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2363.926266] syz-executor.0: attempt to access beyond end of device [ 2363.926266] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2363.927655] loop2: detected capacity change from 0 to 40 [ 2363.927946] buffer_io_error: 1 callbacks suppressed [ 2363.927962] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:18:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) clone3(&(0x7f0000000300)={0x8200100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3d}, &(0x7f0000000180)=""/32, 0x20, &(0x7f0000000240)=""/192, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) fcntl$setown(r3, 0x8, r4) 22:18:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) openat(r0, &(0x7f0000000180)='./file1\x00', 0x20000, 0x108) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x54) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2364.090130] loop0: detected capacity change from 0 to 40 [ 2364.109454] FAT-fs (loop4): bogus number of reserved sectors [ 2364.110076] FAT-fs (loop4): Can't find a valid FAT filesystem 22:18:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x90000605) open(&(0x7f0000000080)='./file2\x00', 0x10000, 0x1) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2364.148699] syz-executor.0: attempt to access beyond end of device [ 2364.148699] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2364.149625] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2364.168476] syz-executor.0: attempt to access beyond end of device [ 2364.168476] loop0: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 2364.179677] FAT-fs (loop5): bogus number of reserved sectors [ 2364.180131] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2364.195683] loop1: detected capacity change from 0 to 40 [ 2364.229518] syz-executor.1: attempt to access beyond end of device [ 2364.229518] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2364.269342] loop3: detected capacity change from 0 to 40 [ 2364.305207] loop2: detected capacity change from 0 to 40 [ 2364.414432] syz-executor.2: attempt to access beyond end of device [ 2364.414432] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2364.415947] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2364.513563] loop6: detected capacity change from 0 to 264192 22:18:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x280800, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x109042, 0xec) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x8, 0x5, 0xb1, 0x7, 0x0, 0xfffffffffffffffb, 0x200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf88, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x4, 0x800, 0x2, 0x70, 0x1, 0x1000, 0x0, 0x5461, 0x0, 0x1ff}, 0x0, 0x4, r3, 0x0) dup3(r3, r4, 0x0) r5 = pidfd_getfd(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:18:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_io_uring_complete(0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x54403, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0xfffffffd, 0x3e, 0x1, 0x2}, 0x1ef, [0x20, 0x10001, 0x7, 0x2, 0x608, 0x8000, 0x10001, 0x1, 0x40, 0xfffffffe, 0x1, 0x29d, 0x1, 0x1, 0x0, 0x100, 0x800, 0x1, 0x4, 0x4, 0x1, 0x4, 0x54, 0x7, 0x2, 0xdf3, 0x8, 0x5, 0xf7, 0x0, 0x1, 0xd88, 0x59fc, 0x9e, 0x6952, 0x20, 0x1, 0x8, 0x8, 0x66dd, 0x7, 0x3, 0x8, 0x5, 0x0, 0x5, 0xffffffff, 0xa8, 0x3, 0xffff0000, 0x6, 0x5, 0x0, 0x2, 0x7, 0x2, 0x1, 0x4, 0x8, 0x2, 0x8001, 0x1200000, 0x1, 0x80000000, 0x5, 0x5, 0x4be, 0x3, 0x3ff, 0x6, 0x9, 0x8000, 0x1, 0x7ff, 0x29c0, 0x3, 0x3, 0x80000000, 0x3, 0x10000, 0x100, 0x9, 0x2, 0x10001, 0x3ff, 0x8, 0xe24, 0x1, 0x0, 0x1ff, 0x7f, 0x5576, 0x4, 0x400, 0x400000, 0x3, 0x895b, 0xf3a3, 0x1f, 0x2, 0xffffffe0, 0xca, 0xffffffff, 0x7ac4, 0x9, 0x2286cfe6, 0x9, 0x0, 0xfffffffb, 0x80000001, 0x7, 0x9, 0x9, 0x7, 0xed, 0x4, 0x7f, 0x9, 0x57, 0x7f, 0x9, 0x6, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x8, 0x2, 0x4, 0x7fff, 0x80, 0x405, 0x8000, 0x6, 0x8001, 0x97, 0x4, 0x200, 0x9, 0x6, 0x1, 0x487, 0x800, 0x3, 0x4, 0x6, 0x2, 0x3f, 0x3ff, 0x80000000, 0x9, 0x7, 0x8, 0x1, 0x8b2a, 0x400, 0xffffff81, 0x3ff, 0x81, 0xfffffffb, 0x2, 0x9, 0x6, 0x1, 0xe3, 0x3ff, 0x3ff, 0x6a03fdf3, 0x504af52a, 0x7, 0x8, 0x3, 0x4, 0x9, 0x3, 0x101, 0x51, 0xfffff531, 0x7fffffff, 0x5, 0x3, 0xd4c, 0xb1, 0x80000000, 0x448, 0x7, 0x34ca, 0x9, 0x8, 0xcbcc, 0x3, 0x7fffffff, 0x90, 0x9, 0xff, 0x9, 0x0, 0x66, 0x7fff, 0x7, 0x318a65df, 0x80000001, 0xff, 0x3, 0x40, 0xffffff01, 0x5, 0x7, 0x96, 0x9, 0xe92c, 0x9, 0x6, 0x1, 0x6, 0xffffffff, 0x380000, 0x8, 0xffffff1a, 0x5, 0x7ff, 0x27, 0x1, 0x6, 0x9e7, 0x100, 0x7, 0x3e00000, 0xd612, 0x0, 0x5, 0x8b63, 0x7a930e73, 0x6, 0x8, 0x2, 0x5, 0x58, 0x40, 0x79b, 0x6, 0x7fffffff, 0xfffff800, 0x7, 0x2, 0x6, 0x2, 0x0, 0x2a1662de, 0x8, 0x4, 0x2, 0xfffffffe, 0x1, 0x1, 0x4, 0x0, 0x80000001, 0x0, 0x2, 0x7, 0x4, 0x8, 0x80000001, 0xe3e, 0xffff, 0x6, 0x9, 0x20000, 0x79b5, 0x1, 0x80000001, 0x10001, 0x4, 0x7, 0x88c9, 0xb122, 0x100, 0x5, 0x8000, 0x1, 0x800, 0x8, 0x8236, 0x2, 0x3f, 0x7b10cded, 0x9, 0x7, 0x3ff, 0x7, 0x6, 0x8, 0x1ff, 0x4, 0xffff, 0x401, 0x8001, 0x10000, 0x3, 0x3, 0x7, 0x9, 0x3, 0x87c, 0x1, 0xc0, 0x1, 0x6, 0x8000, 0x678, 0x81, 0x2, 0xe9e, 0x9, 0x9, 0x1, 0x81, 0xe5, 0x7802, 0x4, 0x4, 0x0, 0x1000000, 0x5, 0xd7, 0x9, 0x40, 0x10001, 0x2, 0x10000, 0x5, 0x3f, 0x9, 0x8001, 0xffff, 0x0, 0xffff, 0x4, 0x3, 0x81, 0x2, 0x4, 0x2, 0x6, 0x2, 0x9, 0x2, 0x3, 0x3, 0x401, 0x4, 0x3f, 0x200000, 0x8, 0x6, 0xb52c, 0x3ff, 0x2, 0x8, 0x81, 0x2, 0xf53f, 0x6, 0x7, 0x1, 0x1, 0x44, 0x1, 0x500, 0x1, 0x42, 0x9, 0x4, 0xc48f, 0x5, 0xfffffffe, 0x40, 0x3, 0x1, 0x0, 0x0, 0x743a, 0x4, 0xfffffff8, 0x6, 0x81, 0x1, 0x5, 0x5, 0x1, 0x4, 0x80000001, 0x5, 0x80000000, 0x4, 0x9, 0x6, 0x0, 0x8, 0x4, 0x6, 0xc26a, 0x3, 0x0, 0x53eaad8, 0x6, 0x401, 0x2, 0x5, 0x5, 0x5, 0x40, 0x7ff, 0x8000, 0x7fff, 0x3, 0x0, 0x9, 0x2, 0x8289, 0x4, 0x400, 0x4, 0x4, 0x8, 0x10001, 0xffffffff, 0xff, 0xfffffff9, 0x3, 0x0, 0x1, 0x6, 0x5, 0x6, 0x8, 0x80000000, 0x0, 0x0, 0xae81, 0x6, 0x2, 0x3, 0x4, 0x2, 0x7f, 0x1000, 0x101, 0x8000, 0x4, 0x7, 0xfff, 0x1, 0x100, 0xfff, 0x7, 0x7, 0x9, 0x4, 0x1, 0x7fff, 0x5, 0x7e681e83, 0x2, 0x1, 0x7fffffff, 0x0, 0xffffff00, 0x4, 0x101, 0x65, 0x7f, 0x3f, 0x1, 0x1, 0x800, 0xc09, 0x4, 0x1, 0x8, 0xc7, 0x10001, 0x0, 0x200, 0x4, 0x4, 0x9, 0x7, 0x8, 0x7ff, 0x1bc, 0xfb, 0x100, 0x9, 0x3dc3, 0x1, 0x6e3, 0x2, 0x1000, 0x4, 0x7, 0x1ff, 0x401, 0x7, 0x4, 0xaa, 0xf4, 0xfff, 0x7f, 0x0, 0x5, 0x4, 0x7, 0x2, 0x8, 0x5, 0xdd3c0000, 0x4, 0x6, 0x10001, 0x81, 0x3, 0x1, 0x9, 0x0, 0x100, 0x9, 0x4, 0x401, 0xfff, 0x3ff, 0xdf4, 0x42, 0x10000, 0xe6e7, 0xfffffffa, 0x101, 0xfffff801, 0x800, 0x3, 0x7, 0x0, 0x2, 0x7c86991b, 0x80, 0x7, 0x3, 0x400, 0x5, 0x1, 0x800, 0x2, 0x6, 0x2996c944, 0xf, 0x2b6e9288, 0x1ff, 0xba, 0x9, 0x0, 0x9, 0x0, 0x7f, 0x7, 0x7, 0x2, 0x200, 0x89b, 0x7, 0x7, 0x1ff, 0x80, 0x9, 0x7, 0x7fff, 0x8, 0x55d96a5c, 0x1, 0xfffffe00, 0x3, 0x63, 0x7fffffff, 0x1, 0xffffffb5, 0x5, 0x1f, 0x7, 0xfff, 0x8, 0x5, 0x101, 0x1285, 0x7, 0xd41f, 0x7, 0x1, 0x1ff, 0x800, 0xfffffffe, 0x4, 0x6, 0xffffff12, 0x10000, 0x62, 0xb904, 0x5, 0x1, 0x7f, 0x4, 0x5, 0x798f9b5b, 0xbd3, 0x45, 0x9e45, 0x400, 0x975c, 0x20, 0x7c3e, 0x7, 0x6, 0x8, 0x7, 0x6a, 0x7, 0x9, 0x3, 0x7f, 0x2, 0x8001, 0x4, 0x8, 0x3, 0x2, 0xffff, 0x2, 0x4, 0xffffffff, 0x4, 0x3, 0x38, 0x10001, 0x5, 0x1, 0x924a, 0x2, 0x0, 0x180, 0x7ff, 0x10001, 0x1ff, 0x5, 0x1f, 0x4, 0x7, 0x0, 0x920, 0x8000, 0x0, 0x6, 0x4, 0x3, 0x9, 0x5, 0x79a, 0x0, 0x72, 0x14b, 0x200, 0x9, 0x6, 0x7, 0x0, 0xff, 0x4, 0x40, 0x4, 0x39a, 0x9, 0xbae, 0x6, 0x5, 0x1, 0x48, 0x424, 0x82b, 0x1, 0x1, 0x7, 0x5, 0x8, 0x6, 0x0, 0x9, 0x20, 0xcdb9, 0x3e1f, 0x9, 0x8, 0x10000, 0x40, 0x7, 0x5, 0xaf3d, 0x5144, 0x1, 0xb754, 0x9, 0xea8, 0x3f, 0x2, 0x401, 0x3, 0x40, 0x5, 0x2, 0x2, 0x6, 0x1, 0xffffffff, 0x5, 0x1, 0x7f, 0x8, 0x6, 0x978, 0x7, 0x8, 0x6, 0x91, 0x7, 0x5, 0x3b, 0x10, 0x6, 0x4, 0xe, 0x1, 0x7f, 0x1000, 0x9, 0x1, 0x4, 0x1f, 0xc6, 0x2, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0xfffffffd, 0x80000000, 0x245, 0x1, 0x0, 0x400, 0x7, 0x4, 0x0, 0x20, 0x6, 0x0, 0x1, 0xfffffff7, 0x0, 0xff, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x9, 0x80000001, 0x7fff, 0x3ff, 0x0, 0x10000000, 0x5, 0x4, 0x4, 0x7, 0x100, 0x5, 0xff, 0x7, 0x86, 0x6, 0x2, 0xa2e1, 0x0, 0x6, 0xa24c, 0x3ff, 0x8, 0x0, 0x80, 0x2, 0x711b, 0x3c, 0x1ff, 0xc65d, 0x6, 0x7ff, 0x80000000, 0x5, 0xfffffffd, 0xbd9, 0xffffffff, 0x2, 0xfffff000, 0x2, 0x8, 0x6b, 0x6, 0x40, 0x3, 0x9, 0x6, 0xfffffffc, 0x2, 0x8, 0x80000001, 0xfffffff7, 0x0, 0x8, 0x80, 0xfff, 0x80000000, 0x2, 0x9, 0x7, 0x2d, 0x80000000, 0x10001, 0x1, 0x3a1a, 0x8, 0x400, 0x5, 0x1f, 0x6, 0x6, 0x4, 0x8, 0xff, 0x1, 0xfffffff7, 0x3, 0x7, 0xffffff7c, 0xffff, 0x6, 0x20, 0xffff, 0x80000000, 0x9, 0x677, 0x1, 0x685, 0x2, 0x80000000, 0xac, 0x7, 0x8001, 0x2ef2, 0x5, 0xc444, 0x3, 0x7, 0x435f, 0x48, 0x5, 0x5c05, 0x9, 0x1, 0xffffc7ae, 0x5, 0x70000, 0x8001, 0x7, 0x0, 0x40, 0x3, 0x8e, 0xfffffffe, 0x0, 0x8, 0xfffffffb, 0xb623, 0x3ee, 0x0, 0x81, 0x3ff, 0xed, 0x3, 0x1334, 0x3, 0xdc7, 0x2, 0xffffffff, 0x40, 0x10000, 0x8495, 0x3, 0x3, 0x49, 0x7, 0x60a, 0x1ff, 0x7, 0x0, 0xfffffe01, 0xffff, 0x0, 0x4, 0xcf3, 0x4, 0xfff, 0x4, 0x20, 0x4, 0x1, 0x5, 0x40, 0xfff, 0x80, 0x6, 0x2, 0x8, 0xfffffffd, 0x4, 0x4, 0x4, 0x6, 0x5, 0x20, 0x4, 0x5, 0x40, 0x1767, 0x8, 0x9, 0x2, 0x81, 0x66a, 0x80, 0x3, 0x9, 0x0, 0x0, 0x5b, 0x6, 0x1, 0x7fff, 0xc9, 0x2a59, 0x51d, 0x7, 0x1, 0x20000, 0x3, 0x6, 0x0, 0x1ff, 0x80, 0x3576, 0x40, 0x89ae, 0x80000000, 0xf40, 0x7, 0x5, 0x6, 0x4, 0xeb8e, 0x0, 0x6, 0x7, 0x5, 0xa5ef, 0x4, 0x1, 0x3, 0x6, 0x200, 0xf74a, 0x6, 0x8, 0x4, 0x7, 0x7f, 0x8c, 0x100000, 0xfffffffa, 0xf14, 0x6, 0x4, 0x5, 0x0, 0x9, 0x6, 0x1, 0xde12, 0x9, 0x6, 0x5f0, 0x8, 0x3, 0x3, 0x7ff, 0x8001, 0x1, 0x362, 0x39, 0x31fd84e7, 0x8, 0x400, 0xffff, 0x200, 0x3]}) r5 = getpid() r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r5, 0x0, r6, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) dup(r7) 22:18:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x3, 0xa6e}, {0x0, 0x4}], 0xffffffffffffffff}, 0x18, 0x1) 22:18:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:18:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)={0x0, 0x1e, '\x00', [@generic={0x0, 0xaa, "0c91ebe98fdec518e22bdf359ecd809189de76c347655413a546d9a35b0bf4e19d98cac29a7529a83e2f2a09994235d1e533e5d96e1c79b54d6d8083c0650b43a0d2b3431cbb54c884c2db4d0ef38e2206a07f200f40ec25b9d1e142a66488810b6740cefa27763168c93890c959f7e8fc5b430a6ca93f4af0613e77e1bd7f0d1079b2014c271faed22de63fe334e946df81b6d2585cd1b15f5cf0f07da6f39624e225abab3d12fd408e"}, @ra, @generic={0x0, 0x3e, "fd461e3ff665b702fd0caa2558dfc8fc3b4b370c230b5d519a071e3a4b69a9b0f7796e7daeb06e8e76b053c061c8c81fff6b03c53b85b4fd80f624875287"}]}, 0xf8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) [ 2379.300805] loop6: detected capacity change from 0 to 40 [ 2379.310962] loop0: detected capacity change from 0 to 40 [ 2379.322813] loop2: detected capacity change from 0 to 40 [ 2379.334533] loop7: detected capacity change from 0 to 40 [ 2379.339194] loop4: detected capacity change from 0 to 40 [ 2379.345014] loop3: detected capacity change from 0 to 40 [ 2379.354506] syz-executor.6: attempt to access beyond end of device [ 2379.354506] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.357561] syz-executor.6: attempt to access beyond end of device [ 2379.357561] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.358492] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.364008] syz-executor.6: attempt to access beyond end of device [ 2379.364008] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.364907] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.370174] FAT-fs (loop5): bogus number of reserved sectors [ 2379.371010] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2379.374898] FAT-fs (loop4): bogus number of reserved sectors [ 2379.375035] syz-executor.6: attempt to access beyond end of device [ 2379.375035] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.375668] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2379.376611] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.384323] syz-executor.0: attempt to access beyond end of device [ 2379.384323] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2379.385302] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2379.398285] loop1: detected capacity change from 0 to 40 [ 2379.406083] syz-executor.6: attempt to access beyond end of device [ 2379.406083] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.406924] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.407679] syz-executor.6: attempt to access beyond end of device [ 2379.407679] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.409277] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.414491] syz-executor.6: attempt to access beyond end of device [ 2379.414491] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.415525] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.418249] syz-executor.0: attempt to access beyond end of device [ 2379.418249] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2379.419141] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2379.431686] syz-executor.6: attempt to access beyond end of device [ 2379.431686] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2379.432654] Buffer I/O error on dev loop6, logical block 10, async page read [ 2379.436953] Buffer I/O error on dev loop6, logical block 10, async page read 22:18:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1e15c3, 0x108) fallocate(r0, 0x12, 0x200010002, 0x80000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xc9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2379.589188] loop0: detected capacity change from 0 to 40 22:18:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x208400, 0x0) 22:18:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="f2f1268c997b222eb584e6e03116903e92a1aa7af6f92f82e699775c929cd0820a1f1868e5bbb6ccf9ec3cbe507b6c6fe70f387c2a4e62e91dc32f241d2798cd5f9b271b2b75a1b6dc5807a040bff440a2664cb02fca3fc37b35a421b1fd503852db8dcb81f7fd5399e0bab448efa9f525f1185753d96daaf1bf699faa5dabead3f1e2dbc3965a5ca7db5cdd96e18815d6704674ebad30c48d8b139b3443a95273d0621402b0a6a58d9095fbd9cb", @ANYRES64=r1, @ANYRES16, @ANYRES16=r1, @ANYRES32], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2379.673695] FAT-fs (loop5): bogus number of reserved sectors [ 2379.674643] FAT-fs (loop5): Can't find a valid FAT filesystem 22:18:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x810084, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:18:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:18:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x80000}, {0x0, 0x0, 0x9}, {&(0x7f0000000740)="d1e793276c18fb349d0b3309a4a9c22feddc302d8a2067a591145f6a2fd4138e93e4d3df941c207b93c6836276304e8c8551ed0e5f63b2d42390e6ca4b2c0e1439b4cad90766e5f12844655dc74156af80e7fb482b143fedd9474ec346373fb5a8883be57e982fb658c6", 0x6a, 0x93c2}, {&(0x7f00000005c0)="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", 0xff, 0x20}], 0x800000, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x40000, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x1a180, 0x1) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x1}, {0xfffffffffffff9ae}, 0x85, 0x0, 0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)="1479744c98bf2ab3e71e5d74d137f489ba0d4d0d16dd7e8c9b8c0937374f87e5246f83a36ca2389c45ab44964dcf87286abc99aeb8ca7256a5408ff9f5eebac4920ff06206857bd87ae3bce251764b3ffb51", 0x52, 0x0, &(0x7f0000000300)={0x2, 0xc0, {0x1, 0xc, 0x0, "", 0xb3, "d4dcdf463e39da01404820faa5e69b4c158c64aa366587fe66621c14bfca4f773c31af0f3195170e3c67765cb8870b44fa1864be69f6370dedf204a58e914390795877109b86e9e2c35cb4cb773eb40bf534cd5e6a26a30f987cfd022242d47df580b425c8571c8d840b04434015f8f45e9da9e34701bd6e492e78ce58fc6385a58b446831d96626fe8a9e695ce8cce49533c5f3234553ddc38ea6b21d90b0b1a8c4df71379632cad20517a5dd6c0166a4ab93"}, 0xd9, "67dd2a2ac3f11e9c67ed9959195a12465f8fd1a3e44508e72ff796965abc0e14730a0789967dc5031941835cbcfa28bd8c960c8b0fd592f34937a0b2a69b2cdd3b334e3c1d782c2090657516cebc7c31689a725e66f2fda2ac218fd9e7bac0c06d3834c2956212c1f7da3f1cad6d95ae6ba4cc095c543300c1c6000a244663882f5778a6b7fbe6eb1c17ba94b58c5d48182691f2bb0b518c458dde09bb7ad7090b7ea4c4550859bb484978d231180f6bb0cac0c1a7674d1acef5351eaa75ff510318ae5585b9af8b7e439c0f0d9d7a1c34de0cc7106828cac9"}, 0x1a5}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r6, 0x0, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r8, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, r1, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x9}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2379.849333] loop0: detected capacity change from 0 to 2048 [ 2379.860568] loop2: detected capacity change from 0 to 40 [ 2379.866195] FAT-fs (loop0): bogus number of reserved sectors [ 2379.867264] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2379.888071] loop6: detected capacity change from 0 to 40 [ 2379.902909] loop4: detected capacity change from 0 to 40 [ 2379.925343] loop3: detected capacity change from 0 to 40 [ 2379.937423] loop1: detected capacity change from 0 to 40 [ 2379.944399] FAT-fs (loop4): bogus number of reserved sectors [ 2379.945629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2379.998320] loop0: detected capacity change from 0 to 2048 [ 2380.040899] FAT-fs (loop0): bogus number of reserved sectors [ 2380.041848] FAT-fs (loop0): Can't find a valid FAT filesystem 22:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7, 0x4, &(0x7f0000000080)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x4}, {0x0, 0x0, 0x2800}, {&(0x7f0000000180)="e2c3835cc58b98d187a6ca1f222687528e3d67e1e78ca1dcba54e8c80241b590ccfa66b573345ce009e1b198f46cf16da7dabf2cd12d5e254e1c33a688f186e6fcd2b11f33def432d315d3fb5a04085e6f47338293fe22fcf71f0430f33671c34ee3a884304df4988b098bfe2ab51f60484309758ca015051c61d6524f1d3ec7e189499dd16ad700112ae6287f47edf57ad1abbc6082c57536aa16451ab1f6072c6b7628ea75e6c5c89549d98835119bc3390d09328e62e1072f09e3aef4db525aed798c7ebd", 0xc6, 0x5}, {&(0x7f0000000280)="11a37180e1f1e385f4ef9b4547a43d524c09e31b827b72f459fc1744ea04e781d46a5b78260527b87eb02fa23aa598bc28cc02b79b0c40e0124f297620218e48477654696977e024afd58a365999f26ed4c7a7f119110ef50a4458807cefdf3fc857390cd12bec0a870b70d3484a3ae792d41261a27099f07683921f84500586b591dac814a8d545280ab89fcadedb12f8c89265020d9ee03f266a232a33a8d9033a10067342adae637355b4d0ed8f0f8618cb4330f8af2b8cb7e8f3bfb0e3e285e8cda80437c81fae04c8fed2584443ca352f9031dea29ad56f2e08de314636437c24ef3808bf1a0b2e33867ced4604014a6f3fb07849", 0xf7, 0x2}], 0x2000000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1c}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 22:19:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000040), 0x80000001) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) openat(r4, &(0x7f0000000080)='./file0\x00', 0x20800, 0x1) [ 2393.664728] loop6: detected capacity change from 0 to 40 [ 2393.668200] loop7: detected capacity change from 0 to 40 [ 2393.670360] loop0: detected capacity change from 0 to 40 [ 2393.670375] loop3: detected capacity change from 0 to 40 [ 2393.673306] loop1: detected capacity change from 0 to 40 [ 2393.673721] loop4: detected capacity change from 0 to 40 [ 2393.681053] FAT-fs (loop5): bogus number of reserved sectors [ 2393.681670] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2393.681833] FAT-fs (loop3): invalid media value (0x1b) [ 2393.682483] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2393.685773] FAT-fs (loop4): bogus number of reserved sectors [ 2393.686289] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2393.692568] loop3: detected capacity change from 0 to 40 [ 2393.696326] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 2393.707437] bio_check_eod: 13 callbacks suppressed [ 2393.707450] syz-executor.1: attempt to access beyond end of device [ 2393.707450] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 22:19:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x216541, 0x120) chdir(&(0x7f0000000180)='./file1\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8a00, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005200)={'ip6gre0\x00', 0x0}) [ 2393.734865] syz-executor.6: attempt to access beyond end of device [ 2393.734865] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.753842] syz-executor.0: attempt to access beyond end of device [ 2393.753842] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2393.756099] buffer_io_error: 9 callbacks suppressed [ 2393.756117] Buffer I/O error on dev loop0, logical block 10, lost async page write sendmmsg$sock(r2, &(0x7f0000007e40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000240)="bef96687297fa96335ab043ec4c1d31c1779c8bcf4777c2e30dfaa37b6f88b00277a1f45cfbdb806a24d06ae2ab442e7b0e6159fa15ec736d7be217dbcaac512b8e2c18e9dd8dfdbbc549c1381c23d9b6708349795cfd95a2df6efabcac1593518687a910c3a3b2113e4e850f441da873b9618c82d865c393b39f41a6ad10c5f", 0x80}, {&(0x7f00000001c0)="85cb2787206c7c27", 0x8}], 0x3, &(0x7f0000000300)=[@mark={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000006940)="e0f14645969837b8c60c97be4a29621d5a7cb2f77fb0e62d12fb668668425495c8f8963f90c754b1ccef44f2e5579752e1ac426a665c8edd24e3a7bf04c00abbeebd909edc9ada2d2fd58a9f8a0c759e343a8e455844016792ce965b2c30124da3cd5ddf45be6cd3f5cf81afc2ff2c926fec2c7e14d4689218196d1872b4870c3cdbaf47344e4f922d0f1060cf625c3252efd6fb16816b4dc079e09759288cfb", 0xa0}, {&(0x7f0000000380)="af859987e19bb11a944c28cadeb10cb0c1d5b42724fedd20ca1e4e342dc4f39df3667fbaa2", 0x25}, {&(0x7f00000003c0)="159c8ba38fbe15b1516fed0796d852562f5e9a4b1caab76cf4134f6772a135f83e77808891ca7caead085fc16af8df0770a81147061ecac3d452c7c70211505bb004274fbe4599af5690e9600395c619365ac4189a0721b3f4feae2ce75606ea3f83ff3de5abaf3116d0cc3441f488550911a24abb755fbb700f51b355a390bef19bbe1fc84a7ae8ab29449bd51d32d3881d4a973e22256ca29416a612f61d78cf2d3d06a5004dbfde964880fb5dfc37ef046e641bbc511675e8857d9d2c6ab00e946ec1c5e75094cfee3cf8726b7ce01a1f25f10fe4fd52e1e6f511be3d444ea782628ee3", 0xe5}, {&(0x7f00000004c0)="3a934af5c7cfc8c9ff1f19a451e124cb1f5f21a4ae3efbcedb6eb47a1d62725d10406a32d052e62e23f2d2ee69bf4c6d09d6313fccc5322a003a9c7fc77c1ddd38dc1801ba4ee353824053cc606f2ec418154cd912a5bed589d3b2d478f3663b6176a61957663994378ec4a63482c90896215a8500c1f3f26096bd44d7946ea8dc74a71262935b44ae00561b555f746b268d4dfb64209ec00b029da3723594a48a2ec75756a3aa3fe8a5dea6d0af5f1a8a09f07b72943eb08f32e35d5020e4b30a7b73f162669230f9916bd96e", 0xcd}, {&(0x7f00000005c0)="54ad70a2adf14ca701b15da37c8437e222af24a6908214baa54f6ef6fc5bff19c2554a7633ab60974bec2b84d915ed821e096d167e3b64f54b9b52b5b474fc0d8482431c2ca7c10e0e96b8505d18edbb001ceac2c109baadc65b1e9ba82f5dd9e47882bec7994b7c6eb4ba279fcc0b96990040b27643b0458899078c46d7a2cc63d263fa9c6b6978a0aa0b327d6d1fef99cc3d70d8f0c688f3d708df986c9059a1e0304880444b4e31c232536449331a788428f15d53172350fae2daee8f0162bc2bdb1ab3978b9abc2f89e8e6d20d2174854fb7f344280f681c4aa3c23df968f651f6ca", 0xe4}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000007c0)="e31af0c39728785bde9d6b4d30a23a35e908b7291eb572f5d706f96bb5042b0d0bc8982312d31ab04d59cb0aeea4ad00d30a1524b0f98905d9021c45d135f5525957476e4eae80c9d6b9cbb91df46029ab340a3fe79f92ceb4338263b4d2170e1b97f3d48a8bb18d0b8a2713e69fccacc58e6210a5eae78888146faf31c5d0e1627120775743915112c92c2b0904e75e18b12b1a40821286811397a4a08adbc453c7187fdffa203df6eaa5903a53b0dcf3", 0xb1}, {&(0x7f0000000880)="5fed79295ea4caf4d38a7343fe5009ab75025d395b397d32f46a8184fe1643fb559ee4ae191bcadb9ae6e4e122fb2b50681e48513c325c3a3868d506b0657ac081f8d9d00ba2cec900d20f8bb7e6427857760330f275313852243b0c89ebfa892f28821a3c0fe5ec927bf16bf81b5c1c7251d0eb7900f757becd287c08eda386b21336d6dc28737fa1793f692f5cf2fbf6bd1bfe8b28ba0f89f9445e6fa3fb09ab4817771bcc84345f1b4ea439a0d0f5aa46563d421f27929c62472262671558465e646346b3e5707c377180a694dfe72e84369ca969c506e5781c8a", 0xdc}], 0x8, &(0x7f0000006c80)}}, {{&(0x7f0000000a80)=@xdp={0x2c, 0xe, 0x0, 0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000b00)="ae32c3b91bfac6f419cbadcf8a10f51f144c8074c8c438ed870bc4df4e314bf5cac09df1d9506a2b26d5397ed3ce982d353aa7440643571a91b553ec6360e00b11c632b4dc103c94f9c91c264f10805305ea326fa8b66fcd2a8dc1953df5ae", 0x5f}, {&(0x7f0000000b80)="86698197fa931f4d75ab09bddd168c8719792b47490f8de353beea8a17c1a2ab27796066923224a3f614861ab4d69a5137adf0caefaa1d3c2d433c8add97c76f52ebfa8a272b610fb2bc12bdd3142937458bbbb98fe1b78a0f9fc5af963bdbcb75e2cdccd9e8d460c13d912e606bad73b672cdc7d00b2353e2880fd5e8fc232d8f264dacbc4b2fee95c19aba4f51f99b4d61c8a6b741c51c51316510150aee939df8e0717c58ebf677cbec20ca71460d4b75e4353b49079f4cc0662fb07ffbd9a0478c47a4320dc501ae84df6c9fa6a7b4b891b5b057a54f34de48c7a123a17839f84db1b9", 0xe5}, {&(0x7f0000000c80)="108d6a96554a8d96c548f8d765db79a7e237f02aab6637e60c2d9bf91f8d157bcaf3f2782e16bd4296ece34118f36cf058187ad3beaf26183effbca39ebf13bed6c8ef22dd3bfcaf341373e995bab43edf05fa72ac30c8054952090c3c407b08b62e3a9348aabf4377408e813d3b6138ebda30925f4d539267a17db7b04dfcb5153759d539907f393a18ddd67821ff4c7b8ec1c58e7bb951ac5642c2721661619601b0a2714a43458ff73ba6f31aaf933549a70a3687c37a41e240b0d43c7762c6baf76bf68d267818fc", 0xca}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="bced0e636d147b83d0d35e50c7c0775c2cbef4913bd0f38a3478794bc505bc4438a818360c5a27790d49c9e8934420c24695c28ce4535e2738331d630c5dbe7a8a064ed7f5047d5150e043bfcc7fa627776d48e54ac0b3b75bd5f2d3e6a698da5b19253d6df8d75a336f3d4e6d3e", 0x6e}, {&(0x7f0000000e40)="2ce61201f3eace5c444313bd2f7567aa3929d02eef022f631024af7e8e83d0642e167ac6b21afa75f20978da67ce3c9ef323e97b859045adf9d788145d88d6e3f5980da9ecd46d0c92e8c6c63e304f74ffc27097dc3ba7b29a7f6f099dc4f56001a8769c28cdf1fe9d21316d8f52", 0x6e}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)="5f45390e91da3727ea5e746ff84d14cf2842ab2b00e0e0d23b43122b2b22d08a92c6b5ceb46020da8b253d64132d46ad76a0b05716879d06ec733507555cc66567b84c6dd2e249c9b5ae9b61bf1de4c2d4dea9976586ccab1f46627fdeab88d594723a778b6bc3bfcb315afeedb26214cf421343f9c12981ae67b6be41bfcf91c36aedc9cf28bfc35b06311b1e016c71b8a5c3290abe2192e11ff80d6b03cc89676f805e54ef62bcce93d02b1fad603629a83c59f98c284763a1317eeec197bc592e8788bc88d6649bdeb4a4eb5d69955055c7de36c1d840a47b6dfb611a9c37b5e49fc663e777", 0xe7}], 0x9, &(0x7f00000020c0)=[@mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}}, {{&(0x7f0000002140)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000003700)=[{&(0x7f00000021c0)="3ccfbb016a3dadf7fd44f90a217b7538963f8d5a5c4dbbd23cea1b0ec4225f1ee95c2c52c763b93f6f5828816382eeef2ec531f66f853f1708452a18cfab095a392a01ed629b0ca88bfb7424e7b12c64c7be547e562e2b4915f0ff5a336f6ec9a616b9958c74a1554c3bb1f8511606cccd4bc05fe33589312ba5c0e47c9dfb37107f5e0debf0acc08effa3d354184686eeb2b639e2e3c7d5270a9429388ac8603c2bc0d0a9311c7eee145c4c08787fe13e", 0xb1}, {&(0x7f0000002280)="e6e96a1c1ff23478e3a2f29dde2491382fd6902b27b0003f1717364658ed70366d2bf0cc2f0766bf752518dbebfb0f5d6d4c34b18e37a0c6fa161bf5d27b6c9b98fd09fc9ed4ceaeefc2344ebde101762969e2e805793f28be4640765f306c39d6ed682af2b18a94b6d728279fce390f5c695522ea22f638720b2c49b48fcc3c580989461e9e0df28a5b6c36b2f5af6d60399426774d7e39a9aa", 0x9a}, {&(0x7f0000002340)="979e70e5b0b0dcd1cea6a025c792ffa00ad07faa79ffb5dbdba5cd0e948f4854cc541da9baba4ecbedec080ed8b30cb84180c7b53ffbee99e3f12eb75ee7c5edbe1bc0cc09", 0x45}, {&(0x7f00000023c0)="6ca93b38dbe4f1a6351535178e6c9d6999450cb5a34e872c6e85bebd5c94304d30279f45caa1008fa6e848dca6b9fce089e0fd480c61b5f8e456ad57314302e4cd742a4ad539c92778e67da171f879349e87c4146487d5a97ecb3b7d1aad6bda3673f9c0873f625873aceb8a5a94c556cc5b566b789999e99c96a66286d278395a411e5f7f1e811adb9d689af0899fe0d65150f79e", 0x95}, {&(0x7f0000002480)="232e697874779759ebde7ada4605983a54024f2bec59df71912ed79325711d99ccc2a1dad056cc83e6996e16075b1f00009909ae92a7ad20cbd8c81c9aff293f2d642ccc654b3ba0f7ea6af06db279a4801e1c8063f929a6f46f4f8bfdc8e2d2e938f04df4570434c3fbc1d9c0b920efeeab7e5bd9b260690a9190ed653fabaffbb46b6443d8818d68f3797b236cf49ee50311335eb1e16cfe2879b64b966f4c4f06cb7d66d7e4a1a06e5c9b", 0xac}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="7ddac4e779e435654b02766e12b3fb1afc0c9909ee03d169c78fac85390272448e75bdcc864257294aefe5b59fbe4a0d562c58c41ff4995f827366dc47883249988c5352f997c114e38d4f2dd61174e7fe3a3c6bc31c51e0e30947f8add3136dbd6cd743f6e86739e271eb1bd4fb822532dae6fe760188bff74b4f65073673aeabf24ff25d6c0910ebc0043cacdc9a7e7282f4d514a6999093c830d57be0c758f5d17ddf920f9f987eff932c92992b972717a15bfb88c86b13560e4b6dd219f067e0ff9d61f03b936f95338b68bd90024a892843f4c2f0773da46e353ea261fb2f8580f31ac3e1e55e451a39", 0xec}, {&(0x7f0000003640)="d0ee47b49df831b9ef79ed9f93047b419af939b4c3288c7d6fe605bbf7beba72afaa8434b90275ac59bf1efce6cf8712432d9fb768681c8be551440eadd2b74b1181646075cb7b5c5b8804d97b3c706d3284520acd5f4dcfa9ddfcc21f6ddb4ae1f4f6e153e2d31c88227aa4e810dfe25731e837ab566d9f96fde38ba89fa98345e7de7878b45080d2", 0x89}], 0x8, &(0x7f0000003780)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff3f3}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}, {{&(0x7f0000003800)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003880)="6d4694bfe561b8ba93a0471f440500e04de410dbba5b46a28b05626f4ce7662ea028ff72f2acde2eea355a76eca41652f2ac01de1a26e777e4314ee99e11cad4e24b8cb3c2f44c64b5a6930a70206acafc0c3887d273c8fd0033716f6f1b08d30046f71e23dde3e414fd57e0283abac51996b3d977c8aed071a98dda6dc62386f9385369de5c5023d16e703279c9060c10f8512f482e860eee2ae0698fb3686408b8faa9f8681563c20a7e55f51feefcc8c7bcb8dd5a3718", 0xb8}, {&(0x7f0000003940)="98e8b79b0cfadf64caf126af27d66726a968c4ab12ee11bba4abfeba0b79cac1092638e0834a3716011501b6cf0ae21011e0501f55f6ea25e891b47f2b60f79016394fe887c8231f838560d8678d14945fbaf1098a252bb26c02dc4a20f37611333b180082057fbff6d9305cce628250b1d4531edadc4c1a4e645018e83fd6f65fb29880b1d1642ff5b3", 0x8a}, {&(0x7f0000003a00)="0878fa7ebe19f1912dd81c09935503ecfc33a6263702ba96612324dae3cefc9069148980bbdcee21c36726f7bc85cd1f7884928b6b91f84bc8641fdc1c6b8b9e48ae4dfb0fac69858228bdd45cf91f32082fb38a6c07bb8fdcff4005cd406040fd68187ffd942fa9fe02f1af6c21f593d3a8103a4cb3d960ab724cf072e0cfe4", 0x80}, {&(0x7f0000003a80)="877fb83eae4f277e1b3359423b0c27ab34573b7cf62370761c1a767a166701cf9b8562a84eb6ce8920ce744e8679e8dfd2314e2c6936eae0073c74889cb4837235ff4a2fcbdefa0b572fdccd78fd8bf81f085a9b8cd00d092be4b62ccaf217e7a9557455e16caecfa1b80fdcbd6b0d865a48f7007073708bd536cf9c2ceb06e16f36c479a596", 0x86}], 0x4, &(0x7f0000003b80)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003bc0)='jK', 0x2}, {&(0x7f0000003c00)="4353ea2c37e3077b71ffde3529708795cb83d667210b8f49c3da19a49ab3b754d3fa7e2f82e3ebf7c9433a0203e36fd09697eb0dd9804cd00edc80c8a95dd4d99b3a24aad7d1b89c15861379953e60746fd7879b05682ff0f621158c50050a902a8838750779f3f75f4bc3b920b0408dffd3f44da23e38e6a3915c77847c14aa7c5a25fd5e478def74a0be4a", 0x8c}, {&(0x7f0000003cc0)="41476b5f4eedc7b107b1778289e4d81090f73dd4f21f4bf431f3a3bd61738cc2053e1c5bed9b562aaa42c5fd7edf03a4df233561e4b36c899e8cb2b4299ec2a694b4210de136f79f1982afe5a26edfe6a07b1e67ab674cf65a98591c89b6fbfc247c1d1abf1e4b42c9b69d042c8b306a13a17ff52fbdc1f88b8a2e9adeb56b030d9d778f032dbae8873a68d80f92f8d30ae67d582a86fbe7dc63113f69bd82f28d4a32ac17b033b55027bef76acf84ebe8ca155605ff6bae24ed176fd5cc9659077fc27127656e33dbc1ef69e17626a775fdef92648a262b9717eddd9a596f7e8e23b6f4c96e524158163b672e44bff8efdafbe3a1b628c061a377ee5696b685445d07c72db9ed238c2f7a6effaae182d059c768f37d97c5b3f961e4a37e77abb9a0328a88cb80f7667de3169e3157febb8cc59b132c49a652285ef857c11a10cc8b588c9c60a990f914a8cc2ba4b529a7644fa7708a84ae6da3a27e5af1f459cf7f4e4fb5d7d183e13aa095911252af8097b11c64efe92a3cd50dcde1fa042ef60bc08750cb4a920595b613500a7f5d1af447cc03580f269757db20e8eb5063e09040c64f2af66e586738480f05e96ef96fba68719056cacfcff371c047cd900b2209ca8dd75f436fbbef82bbe463229d5b6aeea90a6ce9a4daa0259352fdbc73f8d357b46f1a70ef723092774e11c35188a2e577ad594a0a9b503e6b12b48f8f87c609bd2202f8ce3d233f97b36a8f207e82b29eff718a381242f3043d0a55f1a8e1636e5cad88bcd40eed34a98808d641d8a79101bf7756b1409c364e72e5fe8f80133e52643049e385d67dd4d5c58d26b155eae3ed98059ad3f26db00cf77113c39e94373b8c5fe5252b62320284500c54406f01cb027685f801091dd457ee9cf29eb8ba19936d01d28cace49ee4512b6da53abd54e81eb74ae0b213b014123c022902faf728a8463c7d8ec7d2f1dffff7eb2e9c215007b184c2fe0b020eea16897987bdd21f806cd41ffcf1b1e0318b1838884ecfeace9e55cd3726e770c014ea6d1c63f3f3230db3afb88c2507a2f151feddb056f6d401b1994ffa409f0e8335b996ab63aa71c992ba0deffe9c5aa5decb0928d027e5e6adf80c2d0c720fe3f0a9170c324d4c287c23692ae57f53e13b45ee9588459faab2a947a327172b8c36a215e443178d92196fe1f54762bff97222ca6613c5d3c0d1db6c3459192394edde0fd8077ac77f08d29c4e33dd51397cb71b2cfdef85c0c9c9aadaddbb248297dd0ceff832805a9b9633611c90e4b43806ca02616bbcccfa294dc7f46a70a9b70906e44d4efcc6837684673c587862e372b387a965cb4bc5966f8321a1712e4fadc3ff20038ba74715d551bb82a59b33ee6870e70ef48e39b51a011fa7ebf2136803d2e0d58084b1a6d8b784026407e0edc52b898a4afe2d9c9b08ef0698e3b7a028d41eae5e0d49c19f39683a0ec8eca649ec753279643b5302da800abf636f6ba3686c40e3d56969dd6f50aace7ad199b383f5d728ec4d107567e659782739efb5080577b7cf3c29f75967789fce72ad506f2e4eb2ded084819685d7e986033044cd5fe203f700698fd7c37a97a5478cdd8163408d09730c10a7a42585329cea13c9b4b9c493aefd7232e3b4fdfd2a29decb674fe3c0f7d2e5a5461a1f65c777582f32aa4e42a277fe228c829121ffa2edf37c52e8cfb8f026905fae6c3b0078a9ef13084af17628c8710771aec56ebeae8e02978884a95033aaa9a91f983aeca982045510c71ae69ab8e571d358984d2558bafe8cca6464b989cb973f6731e3e8bd5432d0867bbc646ef9cf0590cee53d49252660e2d048cca2475350984273631c0bf59f4e843844b3bab295d89cf7b973533ade38a3a08fc5e011beb9e7eefca67718e4dc9c059c9b6f894ac925169f0cffda7869698b2437f876fcd4870858b319a0184599dd738033df7cc7520c5914f445c8b1f00c969b4ad35d874e5e980fceaf68092ddd36f627f806c1788b7f9b0e5363763cf6a19a4a0f4034a03f0d22e3f5e1fc30d8c82d070614928791de6bf5066b201e0fab573baf177fff0f7af56e44d2f1a2553f5a6eb0e7e8f21ca5a7df98c913ba2102a62d2cf445a27baea7c182f1241bdcb24f3a8d5e589e05ee0aedc1210af067ad8f23551b8a629e3273a7b6c51040e8ccf6e144f922d9e46a9122207d961dea3f850f6afd553d91e55d4cb1cea7f8a59a8725edef8487abe44b2b0083d8049e39645ba6a5a841a0ca9a48d3be90df7b5714c845199fa6ad198631c2171178380d8ca1086c026a4eebbeba5de7c22a09c48d71073fe87bd1f5cee6930453989bb8f48af242eb33f575c555d71b311acd7ce746194d2f2102e28ee7f79bb51aa3441d4fa0203fb12d948512c6239fa0344f0912e9ddb2e1f0ae3c7196d3b281b26f4d04f18c18c2cb5e3d4df9fd6b89ade66fd1d3555e0bdd90dd35fb4e46fdb3fce47ff4e284d306e55960a32c77112d53e55a2b2a1e6e814715f6a543e9f60182f96a59f225cff63420b53c03c381ee893a11b4771b2c5091aec690867d0067792ba44d80f99b83d47d9a6c11f4bee55c47f6be306c14ec20e7f5d53577f82b50433144852970302ee8a13bc79dbf9e571fd62eff3df667f88499d59d23f5990523ab07ac4a828f6a6eb8014993cedca6075ca7983be8a89810e51b40b70af6ab0be0c29f815cdeee01c385e1898bdd4f73a61fcbdfe3ec69c8003410bed2aa935cf804d2351d1da95aa7cbd338bbb63eb4a69a6a45565139935f8a308c2ac46b487f0fbe64bb3aa4c8dc89db6d90f432a22c80b9de241be0538316aaee78204931422e5ba3bca4ed5f8d9e057b2333a924dd85b55b0f53a1f4adc31a696eb3c79ef49b5fca5e7ca42a0ad8a273c2bf2e89ff7fec79b7ad622927205c22d22c46c5ea2833762aa74500f2998128d340c1e7db8b367216402ab3156380cb15c08c8974eb04d2e8c394e26ae7f95154aa7b8ad18f9c232f5f3b1baac245b8046d2d7a74f1b962db28daa03b5ee5dd0bc18fe768a52a852fed218c8e3598667e0d61b6715afcd5cdcd05e4c1b3c2395da47ed0f8cf47262d402a1901465ee628c441ab1a4cc80c7fae87b29cbec4ef3a2abf5ba111a479e237a3da1cbedd4b70c943e0bc139cd494410ff4f1474d5a95ef51dd4fbef83936b0088a5be1dc740948e9bc956f6cecd499e1352a9e48c5bbf5078f4a905d7ca69f32d45628531f1f6751f9c4fdc56688a3d8b3bbd063ba9dbebcda87d24d41ba0db815c1de8b2326310c327b8c97ae4516ebb022258ce5cfb99b17983f863f54bb857bfb40df7edbcf2440dbbe0f0978fc9a8a5742db92f869a6e7b49e0a73542fd88a87add0f052d6a4e5e4c3b56c1a6380f058ae86c6a78ea83e2feb0ce6b26dd7a130c1dce64485ec3435e89fc609036abbf99f29564cda555874a2c711c2edb5fbbaf72bbb64ade8af157df9b7575b29cc54c8e41d847fe317da1989bf73783220883ae2ba893f4e6b634e5b27084da55cdc6651ab2817d09f87544e857c2c52f50f32fe585141fa32a0ee40541824b1cb0f3d6a685159bc90dc604e50d93e62e16a3b5c1a6f4f5200941dc57a9a4ff9d99f2a610fd65d1cf8932e431cb7c237383eec5d8e7f09063be94637087b5fd5949e9d4c1b1859d339b3346bbcca26696ec6cd13050518ebde46f4e343e3411b121900bc02b285f301c691191f5c1af1474e71ab4a45c0079b82146868eff85ae363292192b08060a365d13d6d197c8da710b5d059f3ed5392676362378df86dc93ab1eaaf26066dc8bf6b5bb50633b7801f796b3e17d864c9437974afd456cf1fe2b4487f65df38b93fb1a129169277d38e9a81e98ab2fa5809947c65e84e186e7f6d18ee7b1826b6108dd48a142ada339174cccfb989cd42fa842a1b53821114a8d26b5bfdd011f301e7156d94433eb2126e23922c9305d6dca56dcefe60f0ffa02e2b97442faaf4123896a8b13d2916987d76d2d81a3ed80b3003d75ec7b7297f8b47f27dd0e655fae17f6db883e930757b115664011569a920204055ac5c940d0e92cffa0da7366fa3708ae21516723b6d20db6a037eb8ff8cf8a2c235cdac18b22b4808029a8e6ecf552376a80d1bc2ee4c47c4bcb3db30fc7f8383052cb0cc9d9ba0128f05ecd2eea2b7f31273680a192fc67f4b474987cf75d4b2a0be0ec3fa0c64a7bebf18674eecc9deade157cdb2a49b5609c51d7df51dbb8c9783cf811561287732f02a44167a2fd2bff048305b545d73684d5b9eaf53dd8e7fe5d4d3bbca18aa0ee142e4c195ed09087dcb0bd48dd009e5802671fb9f6cc9be0f927bf78ba71210aae0f06664e1463181793a82e9b4d6939a0d426e609ff6579a057cea289ee9a9b9c52d59b58003b0bcc65c7ee39834780287443a359892694ff96de0e363b02091f2c9f870f97eb88dc6d06929021e4c0e3b53351e0ad9dcefb59c9c7cf63986fb12e642a8af65fa6e0c987540aa510e3e84d4a5d8d0824b3cacb90f0a65a097f666109cb84aaaed73f37ee0a2a1b8fe6e4be0b63185f90e258c69c61ce14b734d0ddaa0eed1eea3e80d7f6e445124ae5a412dd0b6dcc239914580ef45541bb6ad2aeebb6237371a3e9385526e5415cbc5588da74d08273f882bf91a0a7b63e0310dc7f9655a114500044e3ef9e2f10ed725bb59706a43d928607f5453f3b0429fc0d81224b6ff40919e2dfce016590d69b4746ccb4c305ea000e7527064cdfd49aa9b16f874c9d08a2b7a48b9e127b6ecb44a5775080214c46598c7dae069456b046f59a8cadbd01c626791730ff6b5f76d9737c66f596fb82df5fb006e32c9402074eaded04803f28832126e5510775f0742e91906771c23ed98df68bd7b38633865541290546b7cb227cb656e66b601a08730dc0ef60682800211af9cae6034ddef5140149b0f8160fa89a186e5ca2b4c99d243b107bc5001c0abb74c53bf3dc81182f42c84d0555433cd360911cf92de276e3ee53c64cb0b3120f281e31bb89746305e411b9ba8934529e18ac6aa29b8dd3ccd17fbd053c3ff5aa3a1a0b0273f73a8234f182530f61224efa9fc755f1db5f6ceb14d821013b38e2458494a37adcaef9b9d0c20a7d05b3bb0e4cd1a59e75aeff487f4aea45ee6446163ef09f8d075e0457e1180e0d0392698e3c6e96cdd000ec67188eb63975af2398520a195e7d4fc180da1dbe8f2b0deb0d701ccd6838ed489d427e2086e725bb157feca3c8c60f86a1db634e3806b7c789c357ec0a7729beca5faa465ea920a2e158ff7a9ca98f72a5bc784cd52ea2b14cee9bc9c88130e5c19f08bc51dfc767fda0de1dc128e4282a8ac75c8e9770056085b9243126de9537678c17c0e633d32d7a10836a27adfb8e9d3b05849ebd3c1ab7f5267984d78b6585040281159610b2dfd13b80459cb0dbbbae4ded33144abc850faf254102a84e588a96ab1e558790b60aa9f4ed8172d05cc8c16956622e23a230fa3c55518f8c3dd954ba1eb66b613c5fe2720e1bf4906ccf4b3f29de0265271c72eb42ae54a88573ae15f258d19482566aa44f025c5c6b11a8990943a09939389550a549f49496c41dbd04421437dd54a767299874952a5b20e83b72b3cd80eea7e87e4d5016c327b9a7b48455de2e2a1822f011a66c8751607cc7b051a25cb866541025f6784ca7fb2c34eeb9a46972add1172f1dfa41ce213f8306bcb90516ce81ffca848f9c4d06261c9e0bed241becaa967807aa8e2f473a4d9c9ac998ea2a9bdd356", 0x1000}], 0x3, &(0x7f0000004d00)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}, {{&(0x7f0000004d40)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004dc0)="f7295f52d69c7d15780be59e7ee991ff888ec203d6045709b5ddfd9d7e1c618adaf288c6bc17fc6a6a979747b558a3c656dba6e9f6b359135e852891caccf07dbeeeb7045daed644d620b8b34c4082c7039907a15c4d3462ad8730f383143715bd85835f3abed61348c22d3c1eb99253ddca3720f9f03c55691312360bf40511982e32d1618e0e3d014910f5c7188f2ce207bbf367295413ed124cd3a1e02923cc4e7f823ec78ceeb3d8ae61bfb48b3bc7606e393e1a6c085fb37162a1fec39b126ead6be5fbc6068725518653e1c2ca5b8ef9481866c5ff2ea750cedd417df35001663d455325744c47de06af08df3c", 0xf0}, {&(0x7f0000004ec0)="42b5fdb1b533bda71c866e695a2da93c436546a77cdd2cef9d981bd4f5d1d43bee945845298a41f45c9ed5f2ec91cca030ed2a7acfcb32ec60dbb1f40293119502a67500cf1bc2e1831b77042319bd74f461ac0caa54879781f2d5faee9077f310d06b6a9128b4f3eaf7f809d3", 0x6d}, {&(0x7f0000004f40)="17cce132bd0c1838154bfc1f97c05dd35c7668c4a39f5f57945e01f4b66281908c38f1b319eab5b4fd9dc208ca10c04f1390aa94db32b53cadd6ee6b01f410bbe5d9b2b2ab4dce717161ba284f8a76936fa8038d3d093c68429cc9471ec41d6ac2d88763d84a3a83b683e57b98e689e047f22f4e6bb995a808b190bad1b5d915dd1e19d3f77bc82398143b245f95d2316758ab1c9a8b5414590bca2eaac3f6796fa11c817c34e580f60820b400840abaaf3544ebc45ff1241f0864ab2661b9f33896dd520afaeda2bd3c5ca733ab5c7507b067d25dc43ed6c629884a82a43cce68599424f0254d1d3b1e8ce710", 0xed}, {&(0x7f0000005040)="5e82eeff737bf4a9327bdac5f117f0c9c9ad4e80", 0x14}, {&(0x7f0000005080)="5372d388f8916184f9c41c23ebe8", 0xe}, {&(0x7f00000050c0)="b731ad87fa8a4924907373d32e3b36a70dec02c84a91096a86409205129f12467fca8e3fc7b9c7c5acc267ef6bfbea6889ee58b56e9afcb218330e1560337ec2f58698d0e6d40dd5ce2e7f16d6ff377987fc2f1c25e9fc3d64b315ddcdec5c718fab88f614c6185a41d5016d50b4ca8a702041bc9cd870cd7d07722dc10ac79cc5793e5ff0ae14556f2fe49ad0723ab5d30e9705f60b3130b88a0e25e030a64722f4cbbcc76e3275a0abfb4b72e9b0777801ca2f06", 0xb5}], 0x6}}, {{&(0x7f0000005240)=@ll={0x11, 0x1, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x80, &(0x7f0000005600)=[{&(0x7f00000052c0)="650b4958adcd6aa3aa87e614b9148c79a5296bdda06b91424d50cf97c553de5e22f2780a24906bf147c5758a5d01b4e6ee97f2b61a876a916926af1b0b1f4bcb057443eff11cb9c285f026e10706fdcc334c3c599937943955c47dd03eacd896172df91720eed46082f82b776487137ef966cb21786b940ef2a62f9144a8694c36f222", 0x83}, {&(0x7f0000005380)="cbd889f0e57ea679887655672fc783a15a0e51b45306d4152cebeb6adc9f06f178605f8b42b1ad9456a62fb91e7a907c39fd80a18de9674184fd72bd22a30cdb7c529c56b5ca1376f4093feee76f1bb45ccb077064a351", 0x57}, {&(0x7f0000005400)="cff966040792b92908bc9ce4e0ca38212572545749d6e3d0bc2319e6ca6679f26677706773b9fc5050fdb387d2358020a0e6877e3d2ec372c45f886b1e73c4c1bd90edcacfc48b99a6f9763151b98b753b75fd72f7c74ea84eeef920e7d309654dc0f4b7f4f04d94", 0x68}, {&(0x7f0000005480)="5357da87a55f2a64683d0e58d84f6c00fe2a1b6580ba33bfb84e436a10131bb694c0087685e4971096267360a8e97b898dfb5d4c30a1e54e662b2e23c5bb79a0b9da6838ddbf0a205decdd65b7db513a77871100c8085a79cfdaca21259d917b0cce99c1ef53dad6d78a6e7a67b815faddad5fac89b5441951f95271bf95518862f63c0fb27c899321da86637881b87b9ec651daa71e1cbbd3cc8c430754fe842abcab904f693c4a", 0xa8}, {&(0x7f0000005540)}, {&(0x7f0000005580)="c5587455ad47409453335e1fe59b5c0e1b14c8fb1fd5a8d60047e3a1288d0be755f3beb903ed0b2ec5c7b8248550b73e8126f79d94146fbc0803d77b463d8c64d5002b8c54c52ad118f6afbdb3484d629fe62e32808e643b29df995939761c9dde906465d65eedb0a98212", 0x6b}], 0x6, &(0x7f0000005680)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x78}}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005700)="6d5e05e78fb0443ac7949b68ee95bf8deb6b94acd926343e5103f9127aa6a0eaa80133427d85dd341444b413066f0376ea1a61bab9a630d81c4cf2f6c55fcffd5fe48c5e65c1dea6ef806692bd8d616465c5e2cc0a608946a49f3fc979a65fec69663721184fc7300e4ee43f75279b95bca7055940e8977cba45dc500c47f16266ae770509ab5476f9b2cec3da59e21cfe9c047b097f1d4865f8a454bf1e7a29619d200734ae0c", 0xa7}], 0x1, &(0x7f0000005800)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f0000005840)=@isdn={0x22, 0x0, 0x64, 0x27, 0x7}, 0x80, &(0x7f00000068c0)=[{&(0x7f00000058c0)="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", 0x1000}], 0x1, &(0x7f0000006900)=[@mark={{0x14, 0x1, 0x24, 0x43}}], 0x18}}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x7ff, @remote, 0x9}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000200)}, {&(0x7f0000000d80)="2febba142450cbd1aef00d371c35895643f188426ea701b498c03c0dc3b411c33172c7d66b9183705499aa0cf3523d", 0x2f}], 0x2, &(0x7f0000006bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fe0000}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}], 0x48}}, {{&(0x7f0000006c40)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}}}, 0x80, &(0x7f0000005540)=[{&(0x7f0000006e40)="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", 0x1000}], 0x1}}], 0xc, 0x10000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000006d00)={{0x9, 0x1}, 0x100, './file1\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffff) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40000, 0x6cb4add72127e417) [ 2393.763920] syz-executor.6: attempt to access beyond end of device [ 2393.763920] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.766260] Buffer I/O error on dev loop6, logical block 10, async page read [ 2393.770922] syz-executor.6: attempt to access beyond end of device [ 2393.770922] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.772981] Buffer I/O error on dev loop6, logical block 10, async page read [ 2393.799332] syz-executor.6: attempt to access beyond end of device [ 2393.799332] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.800231] Buffer I/O error on dev loop6, logical block 10, async page read 22:19:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x6, 0xe1, 0xf5, 0x81, 0x0, 0x2, 0x4001, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x2, 0x2}, 0x12400, 0x8, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x3ff}, r1, 0x4, r1, 0x0) fcntl$dupfd(r0, 0x406, r4) 22:19:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2393.822623] syz-executor.0: attempt to access beyond end of device 22:19:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2393.822623] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2393.824952] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2393.826884] syz-executor.6: attempt to access beyond end of device [ 2393.826884] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.827752] Buffer I/O error on dev loop6, logical block 10, async page read [ 2393.896203] loop5: detected capacity change from 0 to 40 [ 2393.909884] loop4: detected capacity change from 0 to 40 [ 2393.909994] FAT-fs (loop5): bogus number of reserved sectors [ 2393.911246] FAT-fs (loop5): Can't find a valid FAT filesystem 22:19:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x111042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) io_uring_setup(0x3298, &(0x7f0000000040)={0x0, 0xb8fc, 0x10, 0x2, 0x15c, 0x0, r1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:11 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2393.961987] FAT-fs (loop4): bogus number of reserved sectors [ 2393.963183] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2393.963594] loop6: detected capacity change from 0 to 40 [ 2393.967042] loop0: detected capacity change from 0 to 40 [ 2393.997316] syz-executor.6: attempt to access beyond end of device [ 2393.997316] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2393.998957] loop3: detected capacity change from 0 to 40 [ 2393.999288] syz-executor.6: attempt to access beyond end of device [ 2393.999288] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2394.000566] Buffer I/O error on dev loop6, logical block 10, async page read [ 2394.004475] Buffer I/O error on dev loop6, logical block 10, async page read [ 2394.011853] Buffer I/O error on dev loop6, logical block 10, async page read [ 2394.013840] loop1: detected capacity change from 0 to 40 [ 2394.031971] Buffer I/O error on dev loop6, logical block 10, async page read 22:19:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) chdir(&(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/139, 0x8b}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x1, 0x10152, &(0x7f0000000500)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc5d15e34c44df2b4, 0x116) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, @llc={0x1a, 0x305, 0x2, 0x7, 0x6, 0x4, @broadcast}, @xdp={0x2c, 0xd, 0x0, 0x10}, @llc={0x1a, 0x202, 0x4, 0x40, 0xb8, 0x1, @local}, 0x1, 0x0, 0x0, 0x0, 0xa000, &(0x7f00000005c0)='rose0\x00', 0x2, 0x0, 0xa8fc}) sendfile(r6, r7, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:19:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c4c8e041db0dadeae2b00080101000440002000f801", 0x17, 0x1c}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000180)='./file0\x00', 0x90) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file1\x00', r0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x2000, 0x0) sendfile(r3, r6, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2394.118274] loop0: detected capacity change from 0 to 40 [ 2394.149683] loop6: detected capacity change from 0 to 40 [ 2394.160004] FAT-fs (loop6): bogus number of reserved sectors [ 2394.160428] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2394.995184] loop6: detected capacity change from 0 to 40 [ 2395.001177] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value 22:19:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) 22:19:25 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="6019002000f81134ca478ff7458c13865de934f015149f549231aa76312cc67b2d12d88c0ba2422eaf7dd74f6fa93153bb3c37561b004ab47b1b943ecd2324143d7fd2c75d864a9a584c8543cca97d312548037e96130eeb4c4541a5dc2e98c14f78e3d672153ccd44d2759373a680ca9873bae2dca5d31c6952e8efe21d2969b254c3711dbc2d", 0x87}, {0x0, 0x0, 0x5}], 0x8000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f00000000c0)='./file0\x00', 0x8, 0x103) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x8}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x7fffffff) fchmodat(r0, &(0x7f0000000180)='./file1\x00', 0x10) sendfile(r2, r1, 0x0, 0xfffffdef) 22:19:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='bridge_slave_1\x00') openat(r2, &(0x7f0000000080)='./file0\x00', 0x200, 0x40) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x381340, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2407.135293] loop4: detected capacity change from 0 to 40 [ 2407.139144] loop1: detected capacity change from 0 to 40 [ 2407.140325] loop5: detected capacity change from 0 to 40 [ 2407.141577] FAT-fs (loop4): bogus number of reserved sectors [ 2407.142033] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2407.146784] FAT-fs (loop5): bogus number of reserved sectors [ 2407.147208] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2407.187117] loop3: detected capacity change from 0 to 40 [ 2407.193686] loop6: detected capacity change from 0 to 40 [ 2407.199125] loop2: detected capacity change from 0 to 40 [ 2407.258337] bio_check_eod: 8 callbacks suppressed [ 2407.258362] syz-executor.6: attempt to access beyond end of device [ 2407.258362] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 22:19:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2407.319026] syz-executor.6: attempt to access beyond end of device [ 2407.319026] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.319868] buffer_io_error: 5 callbacks suppressed [ 2407.319877] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.322069] syz-executor.6: attempt to access beyond end of device [ 2407.322069] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.323053] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.337276] syz-executor.6: attempt to access beyond end of device [ 2407.337276] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.338108] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.389509] syz-executor.2: attempt to access beyond end of device [ 2407.389509] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2407.391214] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2407.392894] syz-executor.6: attempt to access beyond end of device [ 2407.392894] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.394624] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.396246] syz-executor.6: attempt to access beyond end of device [ 2407.396246] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.397203] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.401440] syz-executor.6: attempt to access beyond end of device [ 2407.401440] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.402465] Buffer I/O error on dev loop6, logical block 10, async page read 22:19:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2407.426603] loop5: detected capacity change from 0 to 40 [ 2407.433634] FAT-fs (loop5): bogus number of reserved sectors [ 2407.434072] FAT-fs (loop5): Can't find a valid FAT filesystem 22:19:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2407.456626] syz-executor.2: attempt to access beyond end of device [ 2407.456626] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2407.457624] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:19:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) fgetxattr(r4, &(0x7f0000000040)=@random={'osx.', '\x00\x00\x00'}, &(0x7f0000000180)=""/94, 0x5e) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x82440, 0x17b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800000, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x4042, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2407.498125] loop4: detected capacity change from 0 to 40 [ 2407.505197] FAT-fs (loop4): bogus number of reserved sectors [ 2407.505637] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2407.557982] loop1: detected capacity change from 0 to 40 22:19:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2407.599142] loop2: detected capacity change from 0 to 40 [ 2407.599354] loop6: detected capacity change from 0 to 40 [ 2407.646313] syz-executor.6: attempt to access beyond end of device [ 2407.646313] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2407.679656] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2407.679679] loop3: detected capacity change from 0 to 40 [ 2407.685516] Buffer I/O error on dev loop6, logical block 10, async page read [ 2407.797493] loop5: detected capacity change from 0 to 40 [ 2407.823520] FAT-fs (loop5): bogus number of reserved sectors [ 2407.824605] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2408.033072] syz-executor.7 (12357) used greatest stack depth: 22808 bytes left 22:19:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "680dc67e34ae078cd221d2ac73ce1a0a6c8a280a"}, 0x15, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) openat(r2, &(0x7f0000000040)='./file2\x00', 0x8000, 0x82) acct(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file2\x00'}) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) 22:19:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x83) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 22:19:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="6d6b64bf7366d8a02b000801010004409bafcba6760f1464456e0d76dbce46683d01db067872480e797dd48f9afc15c287809d9beddb230f4d9e5c780cc6b9c279fc9eedf777a08f9668d6c82b6ae01d0c17c86f33b70381589a0a5d8b59ddbdd1b3852267670a8c00006cb8f5027a0c2e5ef8a4fa5f28f2dc4ab82a0e55bb007dad61f06309e745739fa738099cdaa65b0e60852f8f3eb868e1f876373aea7c938d249ca5b78c9a", 0xa8}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0xff}) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2423.065822] loop3: detected capacity change from 0 to 40 [ 2423.078583] loop5: detected capacity change from 0 to 40 [ 2423.082705] loop0: detected capacity change from 0 to 40 [ 2423.087513] loop4: detected capacity change from 0 to 40 [ 2423.090583] loop2: detected capacity change from 0 to 40 [ 2423.092878] loop6: detected capacity change from 0 to 40 [ 2423.098882] FAT-fs (loop4): bogus number of reserved sectors [ 2423.099677] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2423.102100] FAT-fs (loop5): bogus number of reserved sectors [ 2423.102904] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2423.105020] FAT-fs (loop6): invalid media value (0x0f) [ 2423.105925] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2423.197556] bio_check_eod: 7 callbacks suppressed [ 2423.197579] syz-executor.2: attempt to access beyond end of device [ 2423.197579] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2423.200133] buffer_io_error: 5 callbacks suppressed [ 2423.200149] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:19:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2423.353456] loop5: detected capacity change from 0 to 40 22:19:41 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2423.406865] FAT-fs (loop5): bogus number of reserved sectors [ 2423.407625] FAT-fs (loop5): Can't find a valid FAT filesystem 22:19:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, 0x0) sendfile(r3, r0, 0x0, 0xaf) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2423.422142] loop4: detected capacity change from 0 to 40 22:19:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r0}, 0x18, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x102810, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@msize={'msize', 0x3d, 0x4}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise_type}, {@appraise_type}, {@euid_lt={'euid<', r0}}, {@uid_gt={'uid>', r1}}]}}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) [ 2423.465379] FAT-fs (loop4): bogus number of reserved sectors [ 2423.466334] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2423.502547] loop3: detected capacity change from 0 to 40 [ 2423.599092] loop0: detected capacity change from 0 to 40 [ 2423.624934] loop2: detected capacity change from 0 to 40 [ 2423.649240] syz-executor.0: attempt to access beyond end of device [ 2423.649240] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2423.651129] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:19:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), &(0x7f0000000240)={0x0, 0xfb, 0x113, 0x1, 0x1, "a6a4a05749a317b353c018a48d66396a", "33d3e4b67791cc16574de7bcfcfdc78a02d3e1113db02661dcf9ac6730cce695f713fd99f3ef2ffeb44f3dfdd1395b71df0ecd774a3675c5d3565570593d8f057fac88bb766961e28e3f45e7c5791a6e9c980d5443a88eab5cddabf4dc2525d20e44a28774393dcb93f46c8285e44fd37d2125e0039bca435c83d27750f51a4edba03ff9088be83965f492e5f2bd718a684be8563374ab22effdb21fd31b7d130df0c465ced8e9cee95a0624812dd66786acea2a34be2aa405007ce9d6a0a84f97deb95363ddd332773f2d3c8d3ca118f631cdd539afea4f32e35bdab2adc84df775eba7e79e77a034ae6727e91baa912f06f5049ac4dfce37146bdcfc7c"}, 0x113, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x49002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2003, 0x89) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r0, 0x0, 0xfffffdef) 22:19:41 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r0, r1/1000+10000}, {0x0, 0x2710}}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000340)=""/76, 0x4c, 0x40002100, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r3, r4, 0x0, 0x7fffffff) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', '#&\x00'}, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0x19, 0x0) [ 2423.892684] loop5: detected capacity change from 0 to 40 [ 2423.912286] loop4: detected capacity change from 0 to 40 [ 2423.920998] syz-executor.2: attempt to access beyond end of device [ 2423.920998] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2423.924784] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2423.931493] FAT-fs (loop4): bogus number of reserved sectors [ 2423.932317] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2423.942460] FAT-fs (loop5): bogus number of reserved sectors [ 2423.943519] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2423.961491] loop6: detected capacity change from 0 to 40 [ 2423.970592] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2423.972257] loop0: detected capacity change from 0 to 40 [ 2423.976111] loop3: detected capacity change from 0 to 40 22:19:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2424.180433] loop4: detected capacity change from 0 to 40 [ 2424.193897] FAT-fs (loop4): bogus number of reserved sectors [ 2424.194703] FAT-fs (loop4): Can't find a valid FAT filesystem 22:19:56 executing program 3: listen(0xffffffffffffffff, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) stat(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)) 22:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:56 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xfffffd6b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2401, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2438.791396] loop5: detected capacity change from 0 to 40 [ 2438.811079] loop6: detected capacity change from 0 to 40 22:19:56 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r0, 0x0, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000003340)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESOCT=r0]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006680), 0x600800, 0x0) getsockname$unix(r2, &(0x7f00000066c0)=@abs, &(0x7f0000006740)=0x6e) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xa880, 0x0) [ 2438.814305] FAT-fs (loop5): bogus number of reserved sectors [ 2438.814754] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2438.816109] loop1: detected capacity change from 0 to 40 [ 2438.827623] FAT-fs (loop7): bogus number of reserved sectors [ 2438.828103] FAT-fs (loop7): Can't find a valid FAT filesystem write$binfmt_elf32(r3, &(0x7f00000022c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xe3, 0xcd, 0xfe, 0x9, 0x3, 0x3e, 0xfffffffd, 0x6, 0x38, 0xd4, 0x305da8c6, 0x5, 0x20, 0x2, 0x3, 0xa3ec}, [{0x7, 0x3f, 0x3, 0x0, 0x1, 0xfffffffd, 0x8d, 0x7}, {0x3, 0x8, 0xffffffff, 0x1, 0x8000, 0xc121, 0x46, 0x3085}], "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"}, 0x1078) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x40000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffff) sendfile(r5, r4, 0x0, 0xfffffdef) 22:19:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x1, '\x00', @d}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:19:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2438.835482] loop4: detected capacity change from 0 to 40 [ 2438.841114] loop0: detected capacity change from 0 to 40 [ 2438.850876] loop3: detected capacity change from 0 to 40 [ 2438.853996] FAT-fs (loop4): bogus number of reserved sectors [ 2438.854968] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2438.895079] loop2: detected capacity change from 0 to 40 [ 2438.900234] syz-executor.6: attempt to access beyond end of device [ 2438.900234] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2438.920025] syz-executor.6: attempt to access beyond end of device [ 2438.920025] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2438.921782] Buffer I/O error on dev loop6, logical block 10, async page read [ 2438.922966] syz-executor.6: attempt to access beyond end of device [ 2438.922966] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2438.924773] Buffer I/O error on dev loop6, logical block 10, async page read [ 2438.937202] syz-executor.6: attempt to access beyond end of device [ 2438.937202] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2438.938991] Buffer I/O error on dev loop6, logical block 10, async page read [ 2438.953365] FAT-fs (loop2): Unrecognized mount option "00000000000000000003g q)‚ö˜åsP?'Ë ÄÛOmÀ¸Kò{×ÃÄPÓæž·r¿JmÅ:”Ïy_TíÔD¿O¥o –Ú-uj`:W"3àìƒvÌ{„³zAW…úÀÆç£ÙQÁó‰ðjU©ª" or missing value 22:19:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:19:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2439.031277] syz-executor.6: attempt to access beyond end of device [ 2439.031277] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2439.033142] Buffer I/O error on dev loop6, logical block 10, async page read [ 2439.035599] syz-executor.6: attempt to access beyond end of device [ 2439.035599] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2439.037412] Buffer I/O error on dev loop6, logical block 10, async page read [ 2439.039195] syz-executor.0: attempt to access beyond end of device [ 2439.039195] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2439.040988] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2439.046323] syz-executor.6: attempt to access beyond end of device [ 2439.046323] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2439.048095] Buffer I/O error on dev loop6, logical block 10, async page read [ 2439.060207] syz-executor.6: attempt to access beyond end of device [ 2439.060207] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2439.061904] Buffer I/O error on dev loop6, logical block 10, async page read [ 2439.068503] syz-executor.6: attempt to access beyond end of device [ 2439.068503] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2439.070305] Buffer I/O error on dev loop6, logical block 10, async page read [ 2439.116243] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2439.180039] loop4: detected capacity change from 0 to 40 [ 2439.207394] FAT-fs (loop4): bogus number of reserved sectors [ 2439.208541] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2439.223939] loop5: detected capacity change from 0 to 40 [ 2439.248024] FAT-fs (loop5): bogus number of reserved sectors [ 2439.248639] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2439.713491] loop2: detected capacity change from 0 to 40 [ 2439.716393] FAT-fs (loop2): Unrecognized mount option "00000000000000000003g q)‚ö˜åsP?'Ë ÄÛOmÀ¸Kò{×ÃÄPÓæž·r¿JmÅ:”Ïy_TíÔD¿O¥o –Ú-uj`:W"3àìƒvÌ{„³zAW…úÀÆç£ÙQÁó‰ðjU©ª" or missing value 22:20:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) write$binfmt_aout(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/1154], 0x47d) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x9}, {0x0, 0x0, 0x2800}], 0x400, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x4, 0xeb, 0x2, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) openat(r3, &(0x7f0000000080)='./file0\x00', 0x1, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="080026006c0900000800220123020000"], 0x2c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0x820) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2453.290894] loop1: detected capacity change from 0 to 40 [ 2453.291261] FAT-fs (loop7): bogus number of reserved sectors [ 2453.292186] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2453.300321] loop5: detected capacity change from 0 to 40 [ 2453.304566] FAT-fs (loop5): bogus number of reserved sectors [ 2453.305184] FAT-fs (loop5): Can't find a valid FAT filesystem 22:20:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x8, 0xdc7, 0x0, 0x0, 0xc, 0x1, {0x3, r1}}, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8600, 0x0) utimensat(r2, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000040)=ANY=[@ANYBLOB="021c00000000"]) r6 = dup3(r0, r5, 0x80000) r7 = perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x2, 0x1, 0x5, 0x4, 0x0, 0x3d, 0x28020, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001680), 0x9}, 0x2020, 0xfffffffffffffffd, 0x9, 0x2, 0x7fffffff, 0x8, 0x3f, 0x0, 0x8001, 0x0, 0x800}, 0x0, 0x4, r4, 0x9) sendfile(r7, r0, &(0x7f0000001740)=0x5, 0x7) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x88800) fsmount(r6, 0x1, 0xf) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x1a0910, r5, 0x3465f000) r8 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f00000014c0)=[{&(0x7f00000002c0)="a106ec66ceea347b141dac6361e2c6810e36e235e01427f80ba0bd7336dcfc632152f17e77d54fa599bc949c5aab9617bcd1f290f5b297df4b1e7dbabd442133f42c46178dc59f24d05a33575eedb725b211133fec00244872582ca213033f52c8acad4d1e1a933453800af99bf4619657eef90e795e87c565336994a143a08472ff655007b9d93d4d84eca266a7b24522f243d4a1aff8ea08062d4280fbf22f20355ac2075e9550a4006aae446ceba2ee788e79e4a219aebd4cba848cc09ce2dc294580b5a01d5ae5fafaef25414463dcfdf4d25a6b852203f41e4b5b4dc5619b460ca23d44f3", 0xe7, 0x7}, {&(0x7f00000003c0)="6d4b31bb717bd05d8c00b129f8d88092b446060e987e05930b20d1cefd337ffd6adec69a45350cfb2cebc559ee1800000000", 0x32, 0x200}, {&(0x7f0000000400)="5cd59fb01a2f7a77c9b88a1eadf0bd7138ec79687e234c1123627b17c5147d0e8c6ba64d7aaa08a05039954edbaf48224b4284c62570ff13142aee58034a34ef55b2dfa25bed896f37075faff90d291b21b60d3c047487e15392e27400c35e451a7ec1bbc346c8daafa5e4b3cd8bedec8a4ff82d9dcca82a8b6f8f108035baf613eef9f955c3f737d8fe1cfe9ab1696c5397be43fab13b2ae2fe7d", 0x9b, 0x6}, {&(0x7f00000004c0)="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", 0x1000, 0x6}], 0x82000, &(0x7f0000001540)={[{@utf8no}, {@nonumtail}, {@shortname_mixed}, {@nonumtail}, {@nonumtail}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type', 0x3d, 'V'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, '/dev/full\x00'}}, {@uid_lt}, {@fowner_lt}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}]}) openat(r8, &(0x7f0000001640)='./file2/file0\x00', 0x80, 0xc0) 22:20:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2453.312493] loop2: detected capacity change from 0 to 40 [ 2453.335722] loop0: detected capacity change from 0 to 40 [ 2453.366501] loop6: detected capacity change from 0 to 40 [ 2453.371464] bio_check_eod: 1 callbacks suppressed [ 2453.371478] syz-executor.2: attempt to access beyond end of device [ 2453.371478] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2453.372447] loop3: detected capacity change from 0 to 40 [ 2453.372794] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2453.375406] loop4: detected capacity change from 0 to 40 [ 2453.398832] FAT-fs (loop4): invalid media value (0x00) [ 2453.399920] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2453.401844] FAT-fs (loop6): invalid media value (0x08) [ 2453.402721] FAT-fs (loop6): Can't find a valid FAT filesystem 22:20:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2453.452641] loop1: detected capacity change from 0 to 40 22:20:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2453.559527] syz-executor.0: attempt to access beyond end of device [ 2453.559527] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2453.561606] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2453.564480] loop1: detected capacity change from 0 to 40 22:20:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) fcntl$setlease(r3, 0x400, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) write(r0, &(0x7f0000000040)="85308872ebdfd1ce4ee20e82a439f326927f207c0bcfaee4e41640d3b73341dd548c4bfecf9cc61e95c63f6a6c1721656ca890dbc0a879b0d72e98a9b5c715152e32acbafb408fe68cafcdf7f5ebdaf8c1a2def461", 0x55) sendfile(r2, r1, 0x0, 0xfffffdef) 22:20:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x955}}, './file0\x00'}) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='@\x00', &(0x7f00000001c0)=':}\x00', &(0x7f0000000240)='vfat\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='{^[)\x00', &(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='vfat\x00', &(0x7f0000000380)='m/*}\x00', &(0x7f00000003c0)=']!^*)j+\x00', &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='}[(\\\x99@,@\x00', &(0x7f0000000480)='*}/$$)*\'\x00'], 0x1400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7fffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x1) sendfile(r3, r1, 0x0, 0xfffffdef) [ 2453.671446] loop1: detected capacity change from 0 to 40 22:20:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x6, 0x9}) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRESDEC, @ANYRES64=r1, @ANYRES16, @ANYRESOCT=r3, @ANYRES32=0x0], 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffff) [ 2453.766140] loop1: detected capacity change from 0 to 40 [ 2453.771180] loop5: detected capacity change from 0 to 40 [ 2453.788210] FAT-fs (loop5): bogus number of reserved sectors [ 2453.788663] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2453.836132] loop2: detected capacity change from 0 to 40 [ 2453.893632] syz-executor.2: attempt to access beyond end of device [ 2453.893632] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2453.894513] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2453.912083] loop0: detected capacity change from 0 to 40 [ 2453.919217] loop4: detected capacity change from 0 to 40 [ 2453.943915] FAT-fs (loop4): invalid media value (0x00) [ 2453.944895] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2453.951721] loop3: detected capacity change from 0 to 40 [ 2453.966467] syz-executor.2: attempt to access beyond end of device [ 2453.966467] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2453.968293] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2454.025655] syz-executor.0: attempt to access beyond end of device [ 2454.025655] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.027764] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2454.084001] syz-executor.0: attempt to access beyond end of device [ 2454.084001] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.086063] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2454.197665] loop6: detected capacity change from 0 to 40 [ 2454.218142] FAT-fs (loop6): invalid media value (0x08) [ 2454.219239] FAT-fs (loop6): Can't find a valid FAT filesystem 22:20:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:20:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2468.230427] loop4: detected capacity change from 0 to 40 22:20:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x332cd6bae8cf36f7, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat(r3, &(0x7f0000000080)='./file0\x00', 0x80041, 0x4) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:26 executing program 6: r0 = getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r0, 0x0, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200), 0x40, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chmod(&(0x7f0000000040)='./file2\x00', 0x105) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x61) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) 22:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2468.252043] FAT-fs (loop7): bogus number of reserved sectors [ 2468.252467] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2468.253174] FAT-fs (loop4): invalid media value (0x00) [ 2468.253547] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2468.257864] loop0: detected capacity change from 0 to 40 [ 2468.272203] loop5: detected capacity change from 0 to 40 [ 2468.303599] loop2: detected capacity change from 0 to 40 [ 2468.306653] FAT-fs (loop5): bogus number of reserved sectors [ 2468.307085] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2468.311164] syz-executor.0: attempt to access beyond end of device [ 2468.311164] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2468.312123] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2468.315297] loop3: detected capacity change from 0 to 40 [ 2468.332082] FAT-fs (loop6): Unrecognized mount option "" or missing value 22:20:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2468.418011] syz-executor.2: attempt to access beyond end of device [ 2468.418011] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2468.420135] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:20:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:26 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x2) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) [ 2468.610072] loop4: detected capacity change from 0 to 40 22:20:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x70) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2468.619130] FAT-fs (loop4): invalid media value (0x00) [ 2468.619970] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2468.696082] loop5: detected capacity change from 0 to 40 22:20:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000028c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f00000029c0)=0xe8) [ 2468.728009] FAT-fs (loop5): invalid media value (0x00) [ 2468.729172] FAT-fs (loop5): Can't find a valid FAT filesystem syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x10000, 0xa, &(0x7f00000027c0)=[{&(0x7f0000000240)="039e5021b87d41bc8d5ca9f8f7a31c42afc175ceddaaa0a216a5786ccec59460b93ef96916a425bb7f5ad5443f18ace94dcde603e8f198078d239b4bcf06680233cd6d0100da6ecfabc1b40c32962aa0a6948cb6cf7d7bff56f22bc636164064f873e4e235ba5c8f864d5dd9c3c3582c6c818396a202e68bf2fda7b0565e8a57e97664cd8522840351434a89de6c718804f56368ef46e0e9ed8af6178ac86276f6df27c4d1a6bfc857c4e601a4b10adee9a58d9421628ed12e25f84a54296789c93af3e4487623f00e", 0xc9, 0x20}, {&(0x7f00000000c0)="51f0e4f8c0864094c59d0e6340f0e80b5ba0790f49473fdfd6a21ad4f881f63641284a071b36b0d687131a07", 0x2c, 0x3}, {&(0x7f0000000340)="a94aa4edccc3ef5962e3baa93bedbe179e84e3c3d9f35fd7c827f029d78379efc169a5923664602b46517217341aa957ea30dbfd22dc0b6bb790e16fffcdbea82a72d027303cdb8b3e83891ef0cc5bde8892e08f785d8840f0e904bb288af3528315b08c375f38b3782a24d1938336e8b3bccbe47d060abd41756ebf9a5ab93f75526013e81e2dd2e8013e4fa35e9820a378906a4f63f42988c4aa2e5b8e8c497c5c5912bcbb30ce6f", 0xa9, 0x10000}, {&(0x7f0000000180)="810759b9bbd631e0313ed98946c575bef9d6017b42f76ecee2687b76423e9b07ca4693594dc66dcab70bdc0f60728931b3add314e6191933efd4cc229c7430428b25936c22a1ea70bea08cfc8092b61f3d9c1c7f18efdbaf866f5cf073fe5f7160ba1bfe6fa954a272a035ebbbb60c895e", 0x71, 0x2}, {&(0x7f0000000400)="900b4d2f91bde1d119697aae2e1b172e0c694b375888d5b2bd3fa654eaba34fca371c9041aa1bdce4a00532f3465d70787286e1184d91f45203d3870542b5c3298c530f6689df3262c5604a42efd48d8e463cafc99da0e6e3c26bac24623692ac33ca59e42abd87ce084af34ee343aea340cbda55f728e7323521e5c958b53296a3eba115d09c57cb24b3e83f1470fd358b8bc9b5a115f07f7ce65327d7e2e5e4db3c2702c48ab01b1f77eb2d2a182c5b858cd49fb65c39e580e901d38b938f6cead6e45fea652731e3ea3ea9eaf7c8f2acefb90f44234f99a4f0b9410d4abc85a642e201ee221874d629566d341566479c0624139e9215080", 0xf9, 0xb11}, {&(0x7f0000000500)="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", 0x1000, 0x4}, {&(0x7f0000001500)="d67174eccea2b02a249a788cbacae60e6a85ef20380a427c5e50c57d919678a95f402f9152c6a252918cca1f9a32434293a9298500c14e8390be68e4221e02562d397fcef7eb1bb232a8067f8628d6e22fb98bd7919154493ebb8409eadd5ce9d27ff128d6c1899d3e571e40d9d51d8b4a1f7d0dacee25b7d21bbb2b2c9bf18756445252d924dea8e6892bbbabdd4d7e5143d412f44166e720148d8c8baf47f303af81642918d81709ec81ca1b156e0abdf7b7ae9555d6d744d1f0c30c307b15794c81e7", 0xc4, 0x101}, {&(0x7f0000001600)="d8352cc8907eb0b350da081f25a2840cf6c8007fbd2abdc93a87a5e61a3369b929171310427dc45b2a72348c0b01d20729766010a96349c2df45a5d7fa857778a60730fe05ae1ea2cdbd4ea15c9f8ee93251b5caeb801ed49699e240f3e486b063826ccbf504d0ef9a8d8373e230c7db28e6fe22846685844eba83a3ed82b4e13eecaa15a2ea6b24d976bfe3a402356748de543f66610d6411bed200c2", 0x9d}, {&(0x7f00000016c0)="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", 0x1000, 0x8}, {&(0x7f00000026c0)="20982c46cf8b38a5d7809f5d06e709ef273a18609d11073f5edb7e757dd976615c8d625f83f7990058d4d086b0d467f898fbfea2ea5ab1093e17c7ee7826954a0cb4c43d1847bb885cf98aa4f110c3b1675206bd710d07ff7e7edb57b581ed450d8bf7ad4ad2eefa7ab7c05a902c19d8faaa92faba37636cef9dd63157ea997cd2d1443f8eafcd13b1e76d633edc2c5fca67217efa1619b1762effbaa9c2f6674bf4817595b3d6985b1ed45f01132a1de00cb8f2a92ecfac10f5f6f6ce7d73367deb43509b81b684bb0977b279674d904b75ab01da04b4be6adf98b15f2eb7", 0xdf, 0x1}], 0x800a0, &(0x7f0000002a00)={[{@lazytime}, {@resuid={'resuid', 0x3d, r0}}, {@barrier}, {@journal_async_commit}, {@data_journal}, {@resuid={'resuid', 0x3d, 0xee01}}], [{@hash}, {@subj_user={'subj_user', 0x3d, '(}'}}, {@subj_user}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) accept(0xffffffffffffffff, &(0x7f0000002ac0)=@nfc_llcp, &(0x7f0000002b40)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2468.770094] loop0: detected capacity change from 0 to 264192 [ 2468.779827] loop3: detected capacity change from 0 to 40 22:20:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2468.818696] loop2: detected capacity change from 0 to 40 22:20:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2468.944129] syz-executor.2: attempt to access beyond end of device [ 2468.944129] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2468.945779] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:20:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2469.084971] loop5: detected capacity change from 0 to 40 [ 2469.093693] loop4: detected capacity change from 0 to 40 [ 2469.101555] FAT-fs (loop5): invalid media value (0x00) [ 2469.102301] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2469.127496] FAT-fs (loop4): invalid media value (0x00) [ 2469.128278] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2469.175219] FAT-fs (loop6): Unrecognized mount option "" or missing value 22:20:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x602000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1/file0\x00', 0x100, 0x84) chdir(&(0x7f0000000140)='./file0\x00') r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/247, 0xf7}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x4, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x120) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000001500)=':\x00', &(0x7f0000001540)='./file1/file0\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2483.873654] loop2: detected capacity change from 0 to 40 22:20:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$FICLONE(r1, 0x40049409, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x7fffffff) [ 2483.886897] loop3: detected capacity change from 0 to 40 [ 2483.900916] loop0: detected capacity change from 0 to 40 [ 2483.908864] loop6: detected capacity change from 0 to 40 [ 2483.941898] loop5: detected capacity change from 0 to 40 [ 2483.955562] FAT-fs (loop5): invalid media value (0x00) [ 2483.956080] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2483.963622] loop4: detected capacity change from 0 to 40 [ 2483.965325] FAT-fs (loop7): bogus number of reserved sectors [ 2483.966333] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2483.968840] FAT-fs (loop1): bogus number of reserved sectors [ 2483.969682] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2483.975437] FAT-fs (loop4): invalid media value (0x00) [ 2483.976022] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2483.984390] syz-executor.0: attempt to access beyond end of device [ 2483.984390] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2483.985477] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2483.988311] syz-executor.6: attempt to access beyond end of device [ 2483.988311] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2483.990204] syz-executor.2: attempt to access beyond end of device [ 2483.990204] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2483.992223] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2484.003372] syz-executor.6: attempt to access beyond end of device [ 2484.003372] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.005180] Buffer I/O error on dev loop6, logical block 10, async page read [ 2484.014675] syz-executor.6: attempt to access beyond end of device [ 2484.014675] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.016505] Buffer I/O error on dev loop6, logical block 10, async page read [ 2484.026111] syz-executor.6: attempt to access beyond end of device [ 2484.026111] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.027650] Buffer I/O error on dev loop6, logical block 10, async page read 22:20:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x600102, 0x0) signalfd(r1, &(0x7f0000000080)={[0x7ff]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x801, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 22:20:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.109044] syz-executor.6: attempt to access beyond end of device [ 2484.109044] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.110547] loop3: detected capacity change from 0 to 40 [ 2484.111182] Buffer I/O error on dev loop6, logical block 10, async page read [ 2484.112660] syz-executor.6: attempt to access beyond end of device [ 2484.112660] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.113750] Buffer I/O error on dev loop6, logical block 10, async page read 22:20:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.118516] syz-executor.6: attempt to access beyond end of device [ 2484.118516] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.119437] Buffer I/O error on dev loop6, logical block 10, async page read [ 2484.139534] syz-executor.6: attempt to access beyond end of device [ 2484.139534] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2484.140562] Buffer I/O error on dev loop6, logical block 10, async page read [ 2484.142530] Buffer I/O error on dev loop6, logical block 10, async page read 22:20:42 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="01fc00000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendfile(r3, r2, &(0x7f0000000080)=0x1000, 0x334) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:20:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="511c6d6b646f7366d8a02b0008010100f00440001fe8f8", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) acct(&(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) bind(r1, &(0x7f0000000180)=@sco, 0x80) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4c010, &(0x7f0000000300)={'trans=virtio,', {[{@version_L}, {@access_user}], [{@obj_role={'obj_role', 0x3d, '-@$()'}}, {@obj_user}, {@measure}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}}) creat(&(0x7f00000000c0)='./file0\x00', 0x2e) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7b}}, './file1\x00'}) 22:20:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.205552] loop4: detected capacity change from 0 to 40 22:20:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x10d242, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r1, r3, &(0x7f0000000340)=0x45, 0x2dcd) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYBLOB="00fb8108069d3698daed3e06c286bdf06ffe4c8a4d5004b2a51b1a3ef73680655ade69d6f80581f2a0f511d121ae64661d68b2dd0a724df51e08669539cd9448a997857ccfd5c4aac06fb128aef36645b566039c77a0f6a04d81029742fe5737305b8ac1aef06501b7cd5914317a42f5b68aa16b133e5f85e359167f063cccd000f8f32205aa2a19eeb011fa43a0a00b2bc9bcd94e44a8ec0275bfee492108eda34721e71584d38916ace3c47278ccb76955b27cf80d2b02cc086f3db308a85548ba71a47cd69b3d1c336b76a5656807ce36de"], 0x81, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = open$dir(&(0x7f0000000040)='./file1\x00', 0x707200, 0x124) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x4000010, r5, 0xfba01000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x1000) sendfile(r4, r6, 0x0, 0x7fffffff) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2484.215640] loop5: detected capacity change from 0 to 40 [ 2484.230031] FAT-fs (loop5): invalid media value (0x00) [ 2484.230430] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2484.232930] FAT-fs (loop4): bogus number of FAT sectors [ 2484.233651] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2484.263476] loop3: detected capacity change from 0 to 40 [ 2484.292538] loop2: detected capacity change from 0 to 40 22:20:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.341477] loop5: detected capacity change from 0 to 40 [ 2484.348372] loop0: detected capacity change from 0 to 40 [ 2484.351670] FAT-fs (loop5): invalid media value (0x00) [ 2484.352188] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2484.365558] loop6: detected capacity change from 0 to 40 [ 2484.400544] FAT-fs (loop6): invalid media value (0xe8) [ 2484.401536] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2484.406237] loop3: detected capacity change from 0 to 40 22:20:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.428968] FAT-fs (loop1): bogus number of reserved sectors [ 2484.429774] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2484.460507] loop6: detected capacity change from 0 to 40 [ 2484.461680] loop5: detected capacity change from 0 to 40 22:20:42 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0xbb, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2}], 0x1300024, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.478485] FAT-fs (loop5): invalid media value (0x00) [ 2484.478907] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2484.479324] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value 22:20:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2484.605301] loop4: detected capacity change from 0 to 40 [ 2484.624455] FAT-fs (loop4): bogus number of FAT sectors [ 2484.625298] FAT-fs (loop4): Can't find a valid FAT filesystem 22:20:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) llistxattr(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)=""/64, 0x40) sendfile(r1, r2, 0x0, 0x7fffffff) openat(r0, &(0x7f0000001600)='./file0\x00', 0x101440, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe8, 0x9, &(0x7f0000001640)=[{&(0x7f00000000c0)="9508481ca2b5f1a6b5b3f54ee4d8c7d9b19bfa6d4f2326726db32f4f5d383eabc7a931092c35364812e8f8abaed970aebd", 0x31, 0x7f}, {&(0x7f0000000180)="4ace9d9f8888564a6a0d77ad9f7d647fb6a1ceff222b48ecfdfb7284cc6d555e9c2df4eaebfef86f004fe64fbace9f00fb9d7770cbf44815610fc8e305d0b7a1813c1e3e36e5893ac012e304e73f73b2f8b4e962791b306dfc9dea75b70521abac2486e1a3cea5ca245df086860ef5fcf67774a350", 0x75, 0x80000000}, {&(0x7f0000000240)="37f5ede97a7dac0302c1d68aee4b5e7a71f5e1c1364c72099cd80e18f1c849d47df6f2838613f42f43533fa5d0726e959224f0e5c33609e7ede35a9d6b9fde932a02d644b0be182f11b36577c5bc03ef6caba332aa52057406ffb0e366c31aa5d417578fc8f6e5ccc220a52971b00cae3f03cad095208cff4535f873e2bc492bb7612a5e010eda8d7016d348becb11891ffa9b00cc6867d3fdf38bfc5c5d257822d3b747ecbbffcd7b50eb267cdc9d6d8ded99597df15cb15871525dae45e4", 0xbf, 0x100000000}, {&(0x7f0000000300)="710340336a64976ddaa6e591599242850da2fa6ea17510e68f7ea98e4d6782774f5e9d45795c1d97ee450a935a4586b4c9c6c70ee0dcdd7e23899fbc09b53b0f3213fefb4376a698a932674ebac576ae2aa9eab58be5fb6af34bf1fbf757df96e8052a5981b407d21a5e1e07e558f617b3ba5a7acb51e03dac913d380fcd76bd955408510c931e17df378e27c00733", 0x8f, 0x2}, {&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000013c0)="e241744db572f056575dc26547a77cc6727d607cc468b56c45740ea719095a763752f7673ea08c7e7702a890a15ae945f9fb95fe467baa8c2b42e64c0bd856049db41dd33f3d832e3066fa6b0bed533c9ba53b8867cfeb5f481e54a76164885140a1c935f963ec6c96dce4e47064dd6adc9d2392e1bd13806f13d242cb4b87657fb68bdcf2c6426a73811f5f521fc0997a051a66af80ca9744043af2ced56a3b77ae339ade798d83e71ff1a0a30d0744f550e76a19e737b43d6c4bee05b9da1121a0e7", 0xc3, 0x5}, {&(0x7f00000014c0)="5918a6d5a71e1a4f0be0afdf1474573decff34455a4c2261a52ddb7d7bf9ef2bde46bf33b4e1337ccdbbd37fb892751ad319b3712c2b37c2531a21248f526d0f11da0037ceb92a5bb9625af559545003b24952b75266ddaf88062b96c7b09f08f7c9fab7a8853a02fa9945a3c7357bf9ba87ccc867173a8c560b2d993db0e4648a0d1c1b6cabd4d228935626f03f66b6fa33a17ae5eadc018bdab6d348f635bc3d427adbf1", 0xa5, 0x9}, {&(0x7f0000001580)="c7925853900575ca8eae919fdad0290fbc962868ff2001e8225363728a0989e4d902e33022f160899670582761e7d15e8cc33b8f4ddc52be53677cd852e5377c1d406b7f49f1a1b932ebddc201a200efd39e34823f601ca28723edc7f355063ac0d124819a23c40185b7724e377c34ed18c7a09acc4170cd1c", 0x79, 0x2}, {&(0x7f0000001600), 0x0, 0x6}], 0x55, &(0x7f0000001740)={[{@init_itable_val={'init_itable', 0x3d, 0x401}}, {@nolazytime}, {@journal_checksum}, {@jqfmt_vfsold}, {}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@appraise}, {@appraise}, {@fowner_lt={'fowner<', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_lt={'euid<', 0xee01}}]}) sendfile(r3, r0, 0x0, 0xfffffdee) [ 2500.294181] loop3: detected capacity change from 0 to 40 [ 2500.296765] loop4: detected capacity change from 0 to 40 22:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x131042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xd100}}, './file1\x00'}) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:58 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) syz_io_uring_setup(0x2b25, &(0x7f0000000040)={0x0, 0xbb24, 0x2, 0x0, 0x24d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x7, 0x2) getpeername$unix(r5, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r6, 0x5600, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd=r6, 0x7, &(0x7f0000000240)="010d95a27c5eaf082956549b4ad077e1e93c4e5eeb0acf3ecf1e45f75b95d9b57a354ae62e44a353aeceb5655237cabe63b828aa4e9a628a1166ced88bb72479870d8e00691a32db694c831ad5c7f93e2daf5c02c85a7d6070f26a5bbea8dc18c54d0e695e85ac4d15c38e194324a6ae4233a5b9fe1f0d73db20a65c7752e6e79aa77c43cd0e5b75c18f8d374f95cb5d45c1ec5a68f6853afa6c3a39123fc7ae2ff121a9098a5c3238adb3d1e277146325", 0xb1, 0x10}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mkdirat(r7, &(0x7f0000000440)='./file1\x00', 0x80) [ 2500.309018] FAT-fs (loop4): bogus number of FAT sectors [ 2500.309394] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2500.310935] loop2: detected capacity change from 0 to 40 [ 2500.316238] FAT-fs (loop1): bogus number of reserved sectors [ 2500.316614] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2500.359331] loop5: detected capacity change from 0 to 40 [ 2500.369573] loop6: detected capacity change from 0 to 40 [ 2500.371581] FAT-fs (loop7): bogus number of reserved sectors [ 2500.372653] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2500.373002] FAT-fs (loop5): bogus number of FAT sectors [ 2500.373995] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2500.375289] loop0: detected capacity change from 0 to 40 22:20:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) chdir(&(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2500.451362] bio_check_eod: 2 callbacks suppressed [ 2500.451380] syz-executor.6: attempt to access beyond end of device [ 2500.451380] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2500.476189] syz-executor.6: attempt to access beyond end of device [ 2500.476189] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2500.477111] buffer_io_error: 1 callbacks suppressed [ 2500.477120] Buffer I/O error on dev loop6, logical block 10, async page read 22:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2500.498724] syz-executor.6: attempt to access beyond end of device [ 2500.498724] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2500.499545] Buffer I/O error on dev loop6, logical block 10, async page read [ 2500.513575] syz-executor.6: attempt to access beyond end of device [ 2500.513575] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2500.514360] Buffer I/O error on dev loop6, logical block 10, async page read 22:20:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:20:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="50828147ecf6b87298ddda803f04000000d5", @ANYRES64]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x440080, 0xa4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400000, 0x4b) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2500.554710] loop4: detected capacity change from 0 to 40 [ 2500.560710] loop2: detected capacity change from 0 to 40 [ 2500.577835] FAT-fs (loop1): bogus number of reserved sectors [ 2500.578663] FAT-fs (loop1): Can't find a valid FAT filesystem 22:20:58 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) open$dir(&(0x7f0000000080)='./file1\x00', 0x240040, 0x84) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1f, 0xffffffff}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) 22:20:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2500.670476] loop0: detected capacity change from 0 to 40 [ 2500.681041] FAT-fs (loop0): Unrecognized mount option "P‚Gìö¸r˜ÝÚ€?" or missing value 22:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2500.695581] loop3: detected capacity change from 0 to 40 [ 2500.698352] loop5: detected capacity change from 0 to 40 [ 2500.707997] FAT-fs (loop1): bogus number of reserved sectors [ 2500.708528] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2500.721055] FAT-fs (loop5): bogus number of FAT sectors [ 2500.721921] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2500.736469] loop0: detected capacity change from 0 to 40 [ 2500.767927] FAT-fs (loop0): Unrecognized mount option "P‚Gìö¸r˜ÝÚ€?" or missing value [ 2500.798641] loop4: detected capacity change from 0 to 40 22:21:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0xb}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000440)='./file0\x00', 0x1, 0x101) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000040)="fe178581e6dc617d3747774f92b3b949a5268b240363d5f0f823591de52f3351df2a8feb1a309cca6f2188d69db56dfae9dd392b2ffb26318273949679fe4153760c", 0x42) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x50903) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r5, r6, r1], 0x3, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x13) clock_gettime(0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x82200, 0x4b) recvmmsg(r8, &(0x7f0000000380)=[{{&(0x7f0000000180)=@ax25={{0x3, @null}, [@default, @remote, @netrom, @netrom, @bcast, @netrom, @netrom, @null]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, &(0x7f0000000340)=""/56, 0x38}, 0x7fffffff}], 0x1, 0x2122, &(0x7f0000000400)) sendfile(r3, r4, 0x0, 0x7fffffff) 22:21:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) removexattr(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') sendfile(r1, r0, 0x0, 0xfffffdef) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000180)={{0x3a, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x3, 'wrr\x00', 0x2, 0x25f88, 0x11}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x3, 0x36, 0x2, 0x2}}, 0x44) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) 22:21:12 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r6, 0x5600, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file1/file0\x00'}) sendfile(r2, r1, 0x0, 0xfffffdef) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4955, r2, &(0x7f0000000300)="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", 0xfc, 0x3, 0x0, 0x1, r4}]) 22:21:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2515.048438] loop0: detected capacity change from 0 to 40 [ 2515.051994] loop6: detected capacity change from 0 to 40 [ 2515.057564] loop2: detected capacity change from 0 to 40 [ 2515.057851] loop3: detected capacity change from 0 to 40 [ 2515.060047] FAT-fs (loop7): bogus number of reserved sectors [ 2515.060867] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2515.069155] FAT-fs (loop1): bogus number of reserved sectors [ 2515.069975] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2515.076309] loop4: detected capacity change from 0 to 40 [ 2515.077686] loop5: detected capacity change from 0 to 40 [ 2515.086229] FAT-fs (loop3): bogus number of reserved sectors [ 2515.087082] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2515.096860] FAT-fs (loop5): bogus number of FAT sectors [ 2515.097701] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2515.161196] syz-executor.2: attempt to access beyond end of device [ 2515.161196] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.163168] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2515.183172] syz-executor.6: attempt to access beyond end of device [ 2515.183172] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.203114] syz-executor.6: attempt to access beyond end of device [ 2515.203114] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.204807] Buffer I/O error on dev loop6, logical block 10, async page read 22:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2515.234132] syz-executor.6: attempt to access beyond end of device [ 2515.234132] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.235958] Buffer I/O error on dev loop6, logical block 10, async page read [ 2515.269057] syz-executor.2: attempt to access beyond end of device [ 2515.269057] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.270875] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2515.280070] loop1: detected capacity change from 0 to 40 [ 2515.287344] syz-executor.6: attempt to access beyond end of device [ 2515.287344] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.288631] FAT-fs (loop1): bogus number of reserved sectors [ 2515.289089] Buffer I/O error on dev loop6, logical block 10, async page read [ 2515.289599] FAT-fs (loop1): Can't find a valid FAT filesystem 22:21:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2515.411708] syz-executor.6: attempt to access beyond end of device [ 2515.411708] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.413338] Buffer I/O error on dev loop6, logical block 10, async page read [ 2515.440963] syz-executor.6: attempt to access beyond end of device [ 2515.440963] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.442716] Buffer I/O error on dev loop6, logical block 10, async page read [ 2515.449074] syz-executor.6: attempt to access beyond end of device [ 2515.449074] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2515.450766] Buffer I/O error on dev loop6, logical block 10, async page read [ 2515.514009] loop4: detected capacity change from 0 to 40 [ 2515.612851] loop3: detected capacity change from 0 to 40 [ 2515.628887] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 22:21:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x400080, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200080, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1f, 0x7}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), &(0x7f0000000240)=0x1, 0x8, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x1200, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r3, &(0x7f0000000280)='./file2\x00', 0xb4200, 0x61) 22:21:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/27, 0x1b, 0x8) openat(r2, &(0x7f0000000080)='./file1\x00', 0x10080, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x42, 0x100) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r0, r2, &(0x7f0000000080)=0x3c, 0x25a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="0f0976a419bde97f637385f23d8ccd2dd3679c9c11e6173830af46b9f9f926eee5a2399ea4531b6f834cba2e6d634f334565257e3db26ea10b17ba3923c005d6709127c363f9f6bf5e88d9fd2920f94a8248a6a5a6b1922c55680a2fa9b013fdd958b33c9967edf2c0a0dbef94ace3e16745f1306b876d72aac6e3b37d3bb446e56157a3ec05910793b04cd825ef79e7f3d8437655cc78bd7c233aae23f903c3f7eb454e8316b5fde0fc22b0afede571bea5f6", 0xb3}, {&(0x7f0000000180)="ef1c073f756079792b32293e9012d0b95dc1556e90a705de1328f71995e032c65dedff4c692dd8838fe1770a9704fca751801bc75d2eeae0134ee4749d228065cb6d97e8608f6145985c37e102454ab6bb008512469c5b33", 0x58}], 0x2, 0xbed, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x7fffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x115042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88180, 0xfd) sendfile(r2, r3, 0x0, 0x7fffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x40}, {0xffffffff}], r8}, 0x18, 0x0) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000ac0)=""/172, 0xac}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000740)=""/89, 0x59}], 0x7, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) r10 = getegid() statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r12) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="02000000010000000000000002000500", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRESHEX=r11, @ANYBLOB="0ba26827dfb9ec573a597c5ab476c0f14f442211f6d3c1cbcec9c545721ba1615133fa5856d2a04a806c6c89f73f85", @ANYRESDEC, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r7, @ANYRES64=r5, @ANYRESHEX=r7, @ANYBLOB="040000000000000008000000", @ANYRES32=r9, @ANYBLOB="b8de9aa4", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r12, @ANYRESDEC, @ANYRES32=r13, @ANYBLOB="080002009d9c0872bd5f1edd5e88aa96784bdad15bcfd9e1db279119edf552af530000000074911b47776c", @ANYRES64=r6, @ANYBLOB="10000300000000002000050000000000"], 0x8c, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2528.648912] loop2: detected capacity change from 0 to 40 [ 2528.649644] loop6: detected capacity change from 0 to 40 [ 2528.665813] loop7: detected capacity change from 0 to 40 [ 2528.666222] loop3: detected capacity change from 0 to 40 [ 2528.668032] FAT-fs (loop7): bogus number of reserved sectors [ 2528.668457] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2528.668960] loop0: detected capacity change from 0 to 40 [ 2528.672937] syz-executor.6: attempt to access beyond end of device [ 2528.672937] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.675763] syz-executor.2: attempt to access beyond end of device [ 2528.675763] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2528.676605] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2528.678390] syz-executor.6: attempt to access beyond end of device [ 2528.678390] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.679226] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.682907] syz-executor.6: attempt to access beyond end of device [ 2528.682907] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.683759] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.686543] loop5: detected capacity change from 0 to 40 [ 2528.689604] loop4: detected capacity change from 0 to 40 [ 2528.694924] syz-executor.6: attempt to access beyond end of device [ 2528.694924] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.695894] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.712348] syz-executor.6: attempt to access beyond end of device [ 2528.712348] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.713195] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.714704] loop1: detected capacity change from 0 to 40 [ 2528.718202] FAT-fs (loop1): bogus number of reserved sectors [ 2528.718627] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2528.723036] syz-executor.6: attempt to access beyond end of device [ 2528.723036] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.724075] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.729012] syz-executor.6: attempt to access beyond end of device [ 2528.729012] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.730016] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.737327] syz-executor.6: attempt to access beyond end of device [ 2528.737327] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.738280] Buffer I/O error on dev loop6, logical block 10, async page read [ 2528.751252] syz-executor.6: attempt to access beyond end of device [ 2528.751252] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2528.752106] Buffer I/O error on dev loop6, logical block 10, async page read 22:21:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x280800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x207fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xffffffffffffffff}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r3}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8, 0x1, &(0x7f0000000340)="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", 0x0, 0x0, 0x1, {0x1, r3}}, 0x9) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) sendfile(r2, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2528.939621] loop2: detected capacity change from 0 to 40 [ 2528.961680] loop4: detected capacity change from 0 to 40 [ 2528.976270] loop0: detected capacity change from 0 to 40 [ 2528.979990] loop5: detected capacity change from 0 to 40 [ 2529.012493] loop1: detected capacity change from 0 to 40 [ 2529.017216] loop6: detected capacity change from 0 to 40 [ 2529.033150] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2529.036515] FAT-fs (loop1): bogus number of reserved sectors [ 2529.037130] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2529.043035] loop3: detected capacity change from 0 to 16383 [ 2529.069232] FAT-fs (loop3): bogus number of reserved sectors [ 2529.069633] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2529.110241] loop3: detected capacity change from 0 to 16383 [ 2529.112099] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 22:21:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2529.247851] loop4: detected capacity change from 0 to 40 [ 2542.169171] loop3: detected capacity change from 0 to 40 22:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100c0, 0x6) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvfrom(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x10000, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 'veth0_macvtap\x00'}}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.193549] loop5: detected capacity change from 0 to 40 [ 2542.195598] loop4: detected capacity change from 0 to 40 22:21:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200002, 0x10) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2542.217176] loop0: detected capacity change from 0 to 40 [ 2542.221439] loop7: detected capacity change from 0 to 40 [ 2542.256342] loop1: detected capacity change from 0 to 40 [ 2542.265053] FAT-fs (loop7): bogus number of reserved sectors [ 2542.266335] FAT-fs (loop7): Can't find a valid FAT filesystem 22:21:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.285312] FAT-fs (loop1): bogus number of reserved sectors 22:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.286342] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2542.308312] bio_check_eod: 9 callbacks suppressed [ 2542.308421] syz-executor.0: attempt to access beyond end of device [ 2542.308421] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2542.309645] buffer_io_error: 7 callbacks suppressed [ 2542.309655] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2542.336303] loop6: detected capacity change from 0 to 40 [ 2542.344268] loop5: detected capacity change from 0 to 40 [ 2542.348876] loop4: detected capacity change from 0 to 40 [ 2542.382501] syz-executor.0: attempt to access beyond end of device [ 2542.382501] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2542.384380] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.427648] loop5: detected capacity change from 0 to 40 [ 2542.457174] syz-executor.6: attempt to access beyond end of device [ 2542.457174] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.477363] syz-executor.6: attempt to access beyond end of device [ 2542.477363] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.479160] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.481184] loop4: detected capacity change from 0 to 40 [ 2542.493913] syz-executor.6: attempt to access beyond end of device [ 2542.493913] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 22:21:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.495526] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.517912] syz-executor.6: attempt to access beyond end of device [ 2542.517912] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.519893] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.551200] syz-executor.6: attempt to access beyond end of device [ 2542.551200] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.552329] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.562159] syz-executor.6: attempt to access beyond end of device [ 2542.562159] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.563195] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.577968] syz-executor.6: attempt to access beyond end of device [ 2542.577968] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.579089] Buffer I/O error on dev loop6, logical block 10, async page read [ 2542.586568] syz-executor.6: attempt to access beyond end of device [ 2542.586568] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2542.587457] Buffer I/O error on dev loop6, logical block 10, async page read 22:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a41, 0x87) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4042, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendfile(r1, r2, 0x0, 0x7fffffff) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x3a01026, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2542.628223] loop5: detected capacity change from 0 to 40 22:21:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2542.674070] loop1: detected capacity change from 0 to 40 [ 2542.679825] FAT-fs (loop1): bogus number of reserved sectors [ 2542.680654] FAT-fs (loop1): Can't find a valid FAT filesystem 22:21:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) openat(r2, &(0x7f0000000040)='./file0\x00', 0x20802, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x6, 0x7fffffff, 0x8, 0x0, 0x9, 0x1}}, &(0x7f0000000240), 0x1400) openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x200000, 0x20) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2542.690982] loop0: detected capacity change from 0 to 40 [ 2542.791674] loop4: detected capacity change from 0 to 40 [ 2542.854573] loop6: detected capacity change from 0 to 40 [ 2542.973965] Buffer I/O error on dev loop6, logical block 10, async page read 22:21:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740), 0x2, 0x1) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9cc, 0x6, &(0x7f0000001600)=[{&(0x7f0000000240)="9bf545a2c2a9520418263a336431b5531f2ba3f642e3c659374d41464bf3fdccd7ca30351272344e803b847e7cd0a8a00dfcf8645321088e624fb9d09a073c1539d747c7144b0ad1e99b0b2d99446053e124936df43a0b29c8b0af0549fd5d11bd2063a9307d22b8fd8f4d017c5aa16f7ddcddc075f10b75cf1e41544c2413fdf3041e13796d5cf3b360d9af38", 0x8d, 0x2}, {&(0x7f0000000300)="ca002ff75e932afcbb9d44d3900781fe1a5f3137f41b268d6442e7a120875f40bb1b3b9abe94f6ea00f6083c3363c2c21f4deec58a6ece96401fdfee647590e8e0d9ac8313d0e591d57aab048bbcac4ede01472e12f73cb5f826fe600b602b3073692dad25b66c7b97c4defd968b515399b4623088100f3238f36d85870844f630665e5db9afd97a7d3ed5883c403afca473f1b3afb57a6f0ec5aacdd0643201fc528185597818acfe975be1d924722669217d850c008a788404112bba0085338111f00c56371d4f60dbcb04910d", 0xce, 0x800}, {&(0x7f0000000400)="675199f41eec330c2725a601968916ea7061b935c4957566191de471ac1120a549936b37413c3240a5d3a2d5120fd2ded88a189c5cfbd7b43d0144abdf9e3293210b2443908ad4d71c328a05a46f5ea877c128ad9be449f0e64ed608c38d2c30fe455e72a86b3a271b46a82bda4bba8ec5392de5ce0ade575f9c0c206f75360750ef349575fb353bee2d9d60839bb8491ce9b368728baa011fcf6d5660058dc5e619edf1050bcaa3b90baa1860cc7d7025cc0f18d8038c89518ab45a44f1dfa2edee3a18e91ddbc55ce076066e21fb57c5c05ae679176516ce519470cbaf8c0e8a6429315870efb1466df56576198703478a8992ac21ffa347dcd4160932906b8180152eeb3034031d7c4502d629a872b65b4f65cbe91d681f9959f582d20e9467410a5a42c08edaba3a2673d3fccbf14051d081701984f954f0de73beae1a00771cea6c7d818f45a9770c6e738f4d37dd1f693501b0ee7d079a54430233bd6025d162972b77c10a65d85a4bd7e2cf817d22595b65ac8a4da189a29bdf3a2569c72ed22cd7e2a5ac2260cc037e02a032c3ee3408267c7c34554d5ed4549fc145ad5fd05489f9ebeabc3a0b0715f5fb78c5dc21292569cd8dc207fa70a3ce9b14b045acfe7c4e93746a2b36386e15d67077679a3fa3a5c92aa45d28a518665db04febbebaf2d943968a377e4295811c08a64f4226c7e3c1424bfbd026ed8729b93c3bf80f1ab566f6d3ae3a31cfb90b0be8bf569d6b2b6b31a7916df9b18ca318817b051d362f1b1e65721bdf4efbeaba93ff9cec336733b544dbb8ab7fd48744754562fc3b719eb77b66e1ebc9f5cb696152e7effd8a5c27c45216e9d69ffab5897713882234bd16a2ae9cebcd181e2dc1df07262da1dedb284a49065df7881815e9599b9897ed3021435eb5abb218fdf3dfca2e28ae97e2ad670baba2b096c23ee731c492fa549966e0520344b2483906d50c6c39d2e9d1399342cf954225fabe244ec9955f91e9d36a33d4bc5d5c604dde2a7a085ba5f310764ba6ada41c265facfc0f3ad9e1b75741bdac40d0b07a9a025330469ddb6366f88ddf47234702219340483191867b4df51430f36bf74f854b54d013a63fb88087087f22af5bf8f923d83fbb47f1c7121e97dc1aace369d8db627e349b46e96ff9e2e78fdb09751ebc30f55c23187a2339412ec506d7cfcfffd70f1d3b15e6934f7dea1d5a614cea7681d31f318d7aa40954ed127f12b010d8dddf713f9ddcaffca41fbddbad856ecb3a49e7bb7b99164ebd1d0229e8c869e66bcab41c91422000b71d63c5b39019de4b47b0b7f4405abad57e3bf0e774e1a81d327481785c33bb23543601126e0b696d38e4fbdd4ea993df1ab164c3a31d187fb47620ad32737606120fe1c7248f200a015dae08c854dd79c9a84ed7df1493b4238cb70d3705b615124b02165dda6a56dc2a3188979e71ffa3d4439c0cde42bd66b2ff1e49834866b7fe8e7fa8943249d11fa61aa9e3b7c07695f91fd35f94627ce5847195253ac3af42785d3254979654587832d021ee3b7868abe4afc461e3f7d91d656475f3602fb6efc0130ac70ff2c58332e894ce804da42866490c4114ecff8b63350b11020579b697942b16f5130e8d5e024ecbdcf31aa89540850bb76eb11a71bf74cefa3df18a6d5e0dcce2a63b53d30ca902eb81132f2f14e301cd48d20cdfb89270a3ab1e36a571ebf5303f6731971b0bd0a7f06d542ed44d128f9ad9c3d60599f39a3c12397dd98d77b3174b6350ce76d12cb1c428dfba03594e33b0f490b52f5f891c7a3f1015c64657471de050741757b959c5943b1d33e6d78faf1303c12be14095e5fa3d5a302d0b53c643e9f2b4b61d22145beecd86bfac522cc4992b1f2e5d6d1bb11f7e805ca39d55c63cc8d7e2e60380f2f3f735a7c8dcf233dc98c8afce839cb0ae054205a915896098b35a8923539aad3e465f5e982298053bb3709d4ea3fcff21606de580cf33f0537553a3ed1db25d1f6f6f8d952aaf5577cefc31b26bce231db4fdb5011491ca9494f9b6fdc044c9593c5ee5dc00e25039675b26ed08db747b198b64d4ed7a608683c2e75eb62a31e6b54ac9d4a27f040e4718afef65cb1ada9da0875c7756545cec5457119d65fb02e7bff8416733dda671ce2dee8f7778b8f8994fa1feeaa535ea7004dec50c62b3f2bee379ccc9963c842f3aacf05bd8024786a11ebb8a8d62ad550afcf2f9a99e5b72b0e1827473765c68bac92c04dc7f7ded90c00901348dee0999f806bcf2913412357f2f5463fd417fecf432069650cd628b84f20e7acb7b09c852a2c638bc8c47006b5b14a8aa1cfbc04021e11a56d378a930b7c8b3af1f6a3014e39c1bd381f4cf616653a58678b017523096108f740706e2eda3e12598bd37a91b17b3d2e115e0addb31f62e0a8759e5b3af04dd64046dd7a2831439ce36dc73913141be885b9f51d378dd959194c5ecd76dc1c512cc40dce32fdd065c13f4a2090d615b5fa958f50d91c714d1bb4f940227d3590fb4a19f7dba07e94f74b9ae01bea68c9bfa6697730bc95dc85b13b0fdfbb1d39fe7ee23e0fe61b14754d62a194589ac4f5a163cf87f6192fca0ef460e2b77822bd225c72de6c541ec2d956c8e55e39782d73cc371fe91eabc4d92b57345cc08587b6a7c9d10a5d715993946bac642b384b43a1b3406113cf65c4a5d389d0493edba5353319ffd9b5ed218e3557dd0e8dc9225fc5c7c62decf4ec79e2f95bc9a53dd976cb72d906d5d5a971ad3228908c51ccfe2d421807aee478bbb45cbc5b815e7bff5363ccaaa8893abad8061ee4b3cc39c8f6fa7bfc7aa6c8480709152a22b6edc6e85c4cb53e93482e29f348d3135a0616b8c38a6ac028dc65f712c2a165914ab6c87d7265c0e87b80fd9cc8010b8f590a181cef46e457561c28a763ac01700ce5312d3914c1fafb9cada2fe2671d69bb90a2e40ca9caf7433bf6341f274dd7b68d924cdb4ee753b18cac092d5e4123148dfb0a8c3610191c24e3060edb30d1783bae16337c5ac02c57c2d5f9bec73cf43646344c2a064f4529a192c8893925d3f6a6c169be9100583c57e13b60059d9bd6c7a5155904189b45e731fc4ed66d532efd910950e76846ce5a2227f1ac895dc7c11a2bd1ed4a4fca206973576b50a0c1f04fecfb84b69a2e827e88520015521b0adfe6e6a549d4cd8f9ab7c2c3e6f354582256df32db80681d8c64d396fbcf42c22a4b43040087b278afc401383b824e0e6d5d3e693a37e17724ff0c2c39c2869e7d0630e3676c6cbfdda9e41425cc32259608c2a421e9f2f4cc34c31bb651a2ccef6923e1e49c91379cf5f4335d459ec080eb68bcbe994d49588f7fd1a6cdc41f5a61ac0936e8b4b480633d12e3c2924702f3dbaacac81ee38992aad69669ec467774fcd76e702a5274a999a5b560d434a7e6947fdd7a5f6f2b3f18e34f61cb750854655f81476768ce6367332b65c8bc8ce701879985299acac87f251231c42d8f7bc59e7a1eba14272b7f6c1606fbd767f1406b26910990621df70ca56cd4c8028be358ce14d2cb8611760c546984ba087a44b9be2c2a4a5f829354e9e34fd0ba01252dfa79b0fdda26b8b12d67876f5298a99e9c1b5ad502b8891d071e576f8fe84c86f4f57dad3cdc15f4eb2ff9c268278fc48f15eccead29e5a7b1b43cdae55db32e28a25a83466e6031f725d6679743525864c73cc6c5cd2a9494c8d1d6662ceef6821e0a7a746ee8947c12549c46b66f33c246c18034901b32a38544613b7139510c8d53951e49aaaaa4ea7bc0d8c493ab91394b5934dbc702614602b94051b08cc31971938e538cf09addf41850563bb8110df471962da58a48b861d348c3f81ba4bd6830a8a6f9519e4edfdb600bd686cbd1e0900de6f2bb614d4c2f2491f890b050339c59ec571ddf9b129531c11de4b00b6bb407e71614a82a312ad0617e5d5404145c46ad5800a817e1e0d90be98e74c8d4d224cbd3410ff529a19a2485f4ee663cc4495a23dabec90fa65c8a6c02202277fb368edd2a47073ad8a84fcdd8995ca487856fedcc9a050c5f30c48f8eaf91bfe6e81a045b0139e801b3db4853df1740eb8bc6056617e3d73f34a496282e64952f79809b225603b1d2a2769ad79f2f059f2919a541ffd5abda6afe155b3bfe811fc9e26561fc47b66b29fba578482270e74e290f2548000683a5a90d6e251062ca230d2533bd5efc4e79fc6072a0c6c275d5d340894ddaff64c6246ec2e4c3a1f2c3527c8fba8a95574f5de345f7f5245539a78ca71b3682f415b810d50a0fbf5fdb72d0a77eab101be996219e2c18733a186e1a427a71e6be11d2e918e27e9ede25c6d36b326c45705c9faa63ad2edcfcfda438ea470acc9093db8fac85f8f79ee14166c847939111323fe23a17f3edfe0cac9b3194cbc14253ed088c04c4a6040a19c4d6afead5c76156f18a085f8f990ca0cb32c388a93a995c79e46e3aec43a415e40d846f526627802b8a1eab12d10b8e7486524fc61af9313b29ec8cfdb2c80fc156f53cb090381d2d3efd9582c78e2a135c87d2af4daf7c53094084e936b479bea4ee1ad66db093a0908c308ad6390ca2a24612fa4205e92f23b86246f705f106e30e913c3bd600757a4f3758c03c6dfd2179364b6d1be209747e424f593000a9edee1eefc345c545d4ef7ca24eb368626a8473c36071254f32ac20890968bdf962fbdb442e8109ee8ed64aae47851e1771ba1147a67c332576358ebeeae2ef609937943af0228b6b40fdb894518b395e45635a29c3d34f23934583a7f5e523c0435bc5f692a3d24a5d901820edb2631a6cee91cbafd34be56552dd32b465e0e2db28ec2a445f1e50674baafe369dc7efa3d69415aef194834cac96a74860e9b9bb8d8c276f69c70ad58591148322b5dc5c5b029be154c8abdccfbd7b6ae2938514966fd36229f7d03320817074fcbae0d587c65a0b1146bbcef5215f0457d42ef8a5f7e49db99fc0cf52bd017010aa3206b9b96ca739eb5bb079d15722a2a1cff96930a17569c05b5197ef299d824026f2edf5a2956c53346ae45246c65cd89b20c881c23d5dd197f0f86e955edda847463dfb400b52f0ccd251773d729a02add1fc4f6896035f781c6b59e3f8916e977ccfb98850a93361764fbc186fc35be0dcf174751359f4ed4fabb9bdc063ff663ab4418308648dea2cdc2ef745b385cf4cd83301274f7eae92942ed92f589eca29e6f47dbd20efcbd65f4249e077048f363668a648eed3ce9a3f9a94b3f4fb1a4e874fce7b5c72530f992b961e9ce68b8c4631cafd374652b43c5e57880baec6489d40a96dbfa2dc3f6e0dc41489e1c76444da2c818c3dd0da7a07f36b92cc5b81476b11decef5c8ad5c4f70ca80d2012842694aa4c4662a5845fc99e64cb5fe56cc197e50f2bdca9cd68025de1741e4140cc46252280de4c09b6e287fd2fe7ae132c3c3c7278df450523f659b4fe38b55d87a36160bc86b1c0aaa3779df9724270747bd83790cd3f65fbbb313f93b5c869bbf7dce16ee0751f2f20bcbd826c6644fb4d5e638a926997034c2267e5d626116f8700511521cc0778b767d64caf7895d20d97d5b74f4e4205218bc1fb83701be20e59f498b2fc88ff493d519d54af3905f2b79971166141de7907ad7b53e75137ee1724da6d0e427b9194881b652791d12e09e481caca4916e13bc68ed89ee35c785098b100a27e96c4462db79849ef95a891e160f897d70214f53544c88e80d6fdb7ba6d8ca4e3f70d3927f5c2e5c", 0x1000, 0x683}, {&(0x7f0000001400)="667b79d2ca94c5a07ca748c2f1eb1d46f52299f7166cda66d07499e4dbd9e2fb72805401f61fd817607d67e75d470e54af754681ea450f442170026679e5ed62cdda1aaf908e57a9bd2744d55e6ae6895836541f2d4a7b3d54ea224a59eba339b867a373478fe511f233b8d0991f0706939fcec5a39f5c5704c3f5de256d37b4fd1080129cf3d9c6b7dcdcd391603e034baa2bb73507bb46718fd2aa017e84a7635730fab23b680572856d856112cedba8f37a3df0f3b79786460037d3ac131fff", 0xc1, 0x5}, {&(0x7f00000000c0)="3a2f1cf7ae40d36b9e6b5a32176fe3b285a5f856e6696a334dbb676bb0bb06", 0x1f, 0x2}, {&(0x7f0000001500)="1804d4444e6f9a1038dbea37eef9e7637ad58f6f790be9758ef5dc82e5bf247f586d4971293f1a68d56f0d3b4925015ff9e25b7f03605c5b4607e85cb16abe55e0d567054caf823e8beaf52f723095ba977e1e304847aa2dae59e9e5d62cbfbee18648198f19055ca7d5faafe40f7134eb0b6870773833390fde907df7060bf45accb98b651d557952a9d919c0ad20ec5e6da1e2835a1b7c19926e0f8c61fa30186f2ddda7a539a43b964a31e8b0caf11bf11744e5883dd0c73815877ddafcf4718f733c7ef65e02f0", 0xc9, 0x2}], 0x200008, &(0x7f0000000180)={[], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@seclabel}]}) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x2, 0x100) 22:21:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:21:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2557.249460] loop3: detected capacity change from 0 to 40 22:21:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2557.254688] loop4: detected capacity change from 0 to 40 [ 2557.259001] loop7: detected capacity change from 0 to 40 22:21:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000000580)=[{&(0x7f0000010000)="601c6d6b64747384d69a03b9abfb29e04e2d9fc5368e39", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000180)="ecd1930a9d587abac16112466a847b9f99baf6c5a599b78030717b70abbea2762ab31bc3b987a52dd2bc95825f943a90ac7d08c18e41ea55db6a4287f37c8914f670a4d56a22cdd858772d688d44b8315e4890aa2a09a828f75f08f8525d57", 0x5f, 0x100}, {&(0x7f0000000080), 0x0, 0x57fdd40e}, {&(0x7f0000000240)="cb4fd2e6e95802af410100003c6b61363ccacd9e61e61d435875e0f875fe865bfca7bc9a1f02000000000000007d457fa61ecfd5c8c8358f280346b0136dd4", 0x3f, 0xe4}, {&(0x7f00000002c0)="f5d6bc72521763ec3988101941c883428a17bda34dc2804d70638f14dd75efa0c1a0a76632689b8be2b283a015636c12507fe3fa68499cd595e07505354f45c44adbdd17723296e25ac3ffc293481b385e90e39ced9480bc3596dd1ba4dea396a7fdfb821c4dede7466066fcf8363501d4077fa54c870c6af05ca6497a83c3a2c2419cdff3a10f693e25bfdedc03ef730ec6f9d6028dab0349c5ca4697d56ab26f6c117ea8d3d138690f0069346f70188d", 0xb1, 0x1}, {&(0x7f0000000380)="46757be3e5dbf892191d7ac3105e90fb9955c54da9e1c67e0a7a449c9cb7004a36f415a1b4eb3617170e23eb23486d32a48bad4e9ef5bf6b8b3f24b03469", 0x3e, 0x8dd}, {&(0x7f00000003c0)="157ac097b349277d9e0148e58166d6195508372d77234ac5aa1a380f3c101c39883b22c6716ba421af3944514a62ffe7e47d0c8e7733186009be53454d8c31e8d4c9", 0x42, 0x400}, {&(0x7f0000000440)="d6f1ae1e18013fe7512780fbfce9c1b67defa247ef4533901f597dd4d1b745d536caf5b8bf137e482bcfb7b47b9d3c52a193c8afb4bb8003a9869bb5ac302626f9b5e474b3bbb95abaef6512f2760475a036560b46adb0e959c3d320b5a1a13f8408f8e7b01cf4e8b11763ca96dd02c78099a5eae0c44be03bf531cb13f8ce1aa8b5a2707bf2ad570b6f8d66528ada3f", 0x90, 0x8000}, {&(0x7f0000000500)="930d5cd5b459c2edf92b189fa45cc6554a6bd8185cad34d646fdfdb8bee897d3353b0a7dedb7ac4226287f02ffe60933af878bf2cd71e7323e831507f2b07c7398d95a879078b899f65a545ffce1b103bee6692b7cabe000eb", 0x59, 0xff}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000040)='./file0\x00', 0x270000, 0x2) 22:21:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000280)='./file1/file0\x00', 0x101042, 0x8) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r6 = open$dir(&(0x7f0000000440)='./file0\x00', 0x480340, 0x24) openat2(r6, &(0x7f0000000480)='./file1/file0\x00', &(0x7f00000004c0)={0x2000, 0x0, 0x4}, 0x18) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r7, 0x502, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x4014) 22:21:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) getdents64(r3, &(0x7f0000000040), 0x0) [ 2557.279515] FAT-fs (loop7): bogus number of reserved sectors [ 2557.280037] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2557.290678] loop5: detected capacity change from 0 to 40 [ 2557.320548] loop6: detected capacity change from 0 to 264192 [ 2557.333484] loop1: detected capacity change from 0 to 40 22:21:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2557.352636] FAT-fs (loop6): invalid media value (0x4d) [ 2557.353510] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2557.369343] loop2: detected capacity change from 0 to 40 [ 2557.374308] loop0: detected capacity change from 0 to 40 [ 2557.375473] FAT-fs (loop1): bogus number of reserved sectors [ 2557.376862] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2557.418441] loop4: detected capacity change from 0 to 40 22:21:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:21:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2557.628448] loop5: detected capacity change from 0 to 40 22:21:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2557.631610] bio_check_eod: 10 callbacks suppressed [ 2557.631622] syz-executor.0: attempt to access beyond end of device [ 2557.631622] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2557.633086] buffer_io_error: 8 callbacks suppressed [ 2557.633096] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:21:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x20800, 0x8) sendfile(r2, r3, 0x0, 0x7fffffff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xc00, 0x38) [ 2557.665411] syz-executor.0: attempt to access beyond end of device [ 2557.665411] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2557.666399] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:21:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) fcntl$dupfd(r2, 0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2557.701696] loop1: detected capacity change from 0 to 40 [ 2557.705541] loop4: detected capacity change from 0 to 40 [ 2557.713861] FAT-fs (loop1): bogus number of reserved sectors [ 2557.714413] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2557.744153] loop3: detected capacity change from 0 to 40 22:21:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2557.835008] loop2: detected capacity change from 0 to 40 [ 2557.870458] loop0: detected capacity change from 0 to 40 [ 2557.916017] syz-executor.2: attempt to access beyond end of device [ 2557.916017] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2557.916975] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2557.988126] syz-executor.0: attempt to access beyond end of device [ 2557.988126] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2557.989906] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2558.149795] loop6: detected capacity change from 0 to 264192 [ 2558.153192] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2558.182829] syz-executor.7 (12894) used greatest stack depth: 22552 bytes left 22:22:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="a52c5c49faa9bf8e98d1ccec86486db675c708e9518f6ad6904dd6ed4390564b7fbce363ac8f8fae177604fe044b10f744ffbfb7cfa6bfe844f12dc2019bbb6f9e17952c784433bd8e8c4aac7ff7a4774ab91b1e198831136b5d05e63e10a59b7fa059c264de870bb6da6f281ba342285d166845b6168af683b31582857a50f2699a921e1fbb98207aa91a9240", @ANYRES32, @ANYRES64], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x2}}, 0xd) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:22:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2573.701911] loop3: detected capacity change from 0 to 40 [ 2573.704359] loop5: detected capacity change from 0 to 40 22:22:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x4042, 0x75) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200800, 0x0) 22:22:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0xa43, 0x14c) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r1, 0x0, 0xfffffdef) 22:22:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x2, 0x0, 'client1\x00', 0x4, "4e0b50ee90a8ef06", "e0237c9a2b7710a3d9984c7d030a277a9443d4e851f542129b0b83ab8a9653f7", 0x2, 0x80}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000300)=""/223, 0xdf}) ioctl$FITHAW(r4, 0xc0045878) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) fcntl$dupfd(r2, 0x406, r5) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r6, 0xaecc8000) [ 2573.719676] loop1: detected capacity change from 0 to 40 [ 2573.757434] loop7: detected capacity change from 0 to 40 [ 2573.766660] loop2: detected capacity change from 0 to 40 [ 2573.769153] FAT-fs (loop1): bogus number of reserved sectors [ 2573.770068] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2573.772031] loop6: detected capacity change from 0 to 40 [ 2573.776160] loop4: detected capacity change from 0 to 40 [ 2573.781062] FAT-fs (loop7): bogus number of reserved sectors [ 2573.781517] FAT-fs (loop7): Can't find a valid FAT filesystem 22:22:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2573.809005] loop0: detected capacity change from 0 to 40 [ 2573.811663] loop5: detected capacity change from 0 to 40 22:22:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2573.866816] syz-executor.6: attempt to access beyond end of device [ 2573.866816] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 22:22:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2573.934233] syz-executor.6: attempt to access beyond end of device [ 2573.934233] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2573.935965] Buffer I/O error on dev loop6, logical block 10, async page read [ 2573.957642] syz-executor.6: attempt to access beyond end of device [ 2573.957642] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2573.959419] Buffer I/O error on dev loop6, logical block 10, async page read 22:22:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x100, 0xfc4ed93692483408) openat(r1, &(0x7f0000000080)='./file1\x00', 0x20000, 0x80) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) [ 2573.989243] syz-executor.0: attempt to access beyond end of device [ 2573.989243] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2573.991176] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2574.003093] syz-executor.6: attempt to access beyond end of device [ 2574.003093] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2574.004990] Buffer I/O error on dev loop6, logical block 10, async page read [ 2574.045105] syz-executor.6: attempt to access beyond end of device [ 2574.045105] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2574.046798] Buffer I/O error on dev loop6, logical block 10, async page read [ 2574.065069] syz-executor.6: attempt to access beyond end of device [ 2574.065069] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2574.067192] Buffer I/O error on dev loop6, logical block 10, async page read [ 2574.076957] syz-executor.0: attempt to access beyond end of device [ 2574.076957] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 22:22:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2574.078886] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2574.098240] loop4: detected capacity change from 0 to 40 22:22:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4000, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x80202) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x703042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2574.128518] loop5: detected capacity change from 0 to 40 [ 2574.157341] loop2: detected capacity change from 0 to 40 [ 2574.204848] loop1: detected capacity change from 0 to 40 [ 2574.212331] FAT-fs (loop1): bogus number of reserved sectors [ 2574.213260] FAT-fs (loop1): Can't find a valid FAT filesystem 22:22:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x4042, 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2574.280477] loop3: detected capacity change from 0 to 40 [ 2574.337691] loop2: detected capacity change from 0 to 40 22:22:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffc00, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffe}, {0x0, 0x0, 0x2800}, {&(0x7f0000000040)="3f127ee8253376ec7c4e8d3e8b105bbeea51e298097b574e68cba05a06f7336f1c7a9a3d2212c2eae50351699279d45f7f9f01b9099291609b028ae4c0ecb4ddaa01e15fa314592214970014761be7d41c9daee025e5c43d9b919b7f56584c712966fbd690114015ad5ec574bc435c8b8cc1d769e052c230aba5c8aeea3cb8cba39a31393acce022daf21140b1d5587c77a0384323aaaef39bded11bb78a117ddcde96c93947f477", 0xa8, 0x5}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x400000, 0xcf, 0x18}, 0x18) openat(r0, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) fallocate(r0, 0x31, 0x1, 0xcea) 22:22:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/127, 0x7f}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x140e1) renameat(r1, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000001300)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r7 = getpid() r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r7, 0x0, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r8, {r4, r2}}, './file0\x00'}) 22:22:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2574.372551] loop0: detected capacity change from 0 to 264192 [ 2574.384561] FAT-fs (loop0): invalid media value (0xea) [ 2574.385262] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2574.395882] syz-executor.2: attempt to access beyond end of device [ 2574.395882] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2574.397326] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2574.414118] syz-executor.2: attempt to access beyond end of device [ 2574.414118] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2574.415504] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2574.499666] loop6: detected capacity change from 0 to 40 [ 2574.589638] loop4: detected capacity change from 0 to 40 [ 2574.590916] Buffer I/O error on dev loop6, logical block 10, async page read [ 2575.205829] loop0: detected capacity change from 0 to 264192 [ 2575.208256] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 2588.149261] loop0: detected capacity change from 0 to 40 [ 2588.149694] loop7: detected capacity change from 0 to 40 22:22:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140)={0x0, 0x0}, &(0x7f0000004180)=0xc) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) getresuid(&(0x7f00000041c0), &(0x7f0000004200), &(0x7f0000004240)=0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r6) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000004280)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x3}, {0x2, 0x2, r2}, {0x2, 0x4, r3}, {0x2, 0x1, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x5, r4}, {0x2, 0x6, r5}], {0x4, 0x4}, [{0x8, 0x0, 0xee01}, {0x8, 0x7}, {0x8, 0x7, r6}], {0x10, 0x1}, {0x20, 0x5}}, 0x7c, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0x820) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:26 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9c638f8eb0e9bed1, 0x80) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:22:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) chdir(&(0x7f0000000040)='./file0\x00') 22:22:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:26 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r5, 0x0, r6, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)=0x2) sendfile(r3, r4, 0x0, 0x7fffffff) [ 2588.154063] loop6: detected capacity change from 0 to 40 [ 2588.164633] loop5: detected capacity change from 0 to 40 [ 2588.165245] FAT-fs (loop7): bogus number of reserved sectors [ 2588.165856] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2588.175837] loop4: detected capacity change from 0 to 40 [ 2588.184041] loop2: detected capacity change from 0 to 40 [ 2588.209093] bio_check_eod: 7 callbacks suppressed [ 2588.209105] syz-executor.0: attempt to access beyond end of device [ 2588.209105] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.210392] buffer_io_error: 5 callbacks suppressed [ 2588.210402] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2588.235113] syz-executor.0: attempt to access beyond end of device [ 2588.235113] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.235839] syz-executor.6: attempt to access beyond end of device [ 2588.235839] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2588.236010] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2588.242380] loop3: detected capacity change from 0 to 40 [ 2588.245450] loop1: detected capacity change from 0 to 40 22:22:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2588.257900] syz-executor.6: attempt to access beyond end of device [ 2588.257900] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2588.260038] Buffer I/O error on dev loop6, logical block 10, async page read [ 2588.268146] FAT-fs (loop1): bogus number of reserved sectors [ 2588.269115] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2588.288903] loop5: detected capacity change from 0 to 40 [ 2588.289646] syz-executor.6: attempt to access beyond end of device [ 2588.289646] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2588.290614] Buffer I/O error on dev loop6, logical block 10, async page read [ 2588.294278] syz-executor.6: attempt to access beyond end of device [ 2588.294278] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2588.295198] Buffer I/O error on dev loop6, logical block 10, async page read [ 2588.362043] syz-executor.2: attempt to access beyond end of device [ 2588.362043] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.363969] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:22:26 executing program 0: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2588.403695] syz-executor.2: attempt to access beyond end of device [ 2588.403695] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.404626] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:22:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2588.438683] loop0: detected capacity change from 0 to 40 22:22:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:22:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:26 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) listxattr(&(0x7f0000000180)='./file2\x00', &(0x7f0000000240)=""/90, 0x5a) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = signalfd(r0, &(0x7f00000001c0)={[0x3ff]}, 0x8) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x523000, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = io_uring_setup(0x3af1, &(0x7f0000000300)={0x0, 0x5103, 0x0, 0x3, 0x36, 0x0, r1}) dup2(r1, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r1, 0x4a, 0x2, 0x7) lsetxattr$security_evm(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "59fd8938e1a3fe685b094c8fe7bb128d11251a65"}, 0x15, 0x3) sendfile(r5, r3, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2588.494071] syz-executor.0: attempt to access beyond end of device [ 2588.494071] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.494987] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2588.510235] loop1: detected capacity change from 0 to 40 [ 2588.516661] FAT-fs (loop1): bogus number of reserved sectors [ 2588.517099] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2588.518343] loop6: detected capacity change from 0 to 40 [ 2588.564848] loop5: detected capacity change from 0 to 40 [ 2588.593228] syz-executor.6: attempt to access beyond end of device [ 2588.593228] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2588.594173] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2588.629590] loop4: detected capacity change from 0 to 40 22:22:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'rose0\x00'}) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0_vlan\x00'}) 22:22:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x101}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="a6e12da3b9b90599e61d0a1f5a7a262c2dfeaec84cb07cd8f36919ef169b4feece0ec0b40c7cc550bde286b462c7785a62d98d6cd5e3dde8389e8002", 0x3c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r4, &(0x7f0000000040)='./file0\x00', 0x800, 0x8) 22:22:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2605.093529] loop3: detected capacity change from 0 to 40 [ 2605.096471] loop7: detected capacity change from 0 to 40 [ 2605.104895] loop4: detected capacity change from 0 to 40 [ 2605.106687] FAT-fs (loop7): bogus number of reserved sectors [ 2605.107086] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2605.116701] loop2: detected capacity change from 0 to 40 [ 2605.119532] loop0: detected capacity change from 0 to 40 [ 2605.145402] FAT-fs (loop2): bogus number of reserved sectors [ 2605.146370] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2605.157615] loop1: detected capacity change from 0 to 40 [ 2605.166297] FAT-fs (loop1): bogus number of reserved sectors [ 2605.167303] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2605.178868] loop6: detected capacity change from 0 to 40 22:22:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:22:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="f55e864b5bd0d75d2885ca3f4f23d82a6d3de05f4c94ce5b848908ba579b28d92c03aaf1ed848a707703512a5b10be298d236b4f8159ae1769fb07584e13406224252093ab1aaa01fff741ecb0ef841603d1a726bfea662744033ed79f40dfc298c4495b8305706dc403f039ad5d74eb3ba00d3200613ce86ebb813026f718451cb84cfde6a24a8d7b115eb5f5427b22dc16c74d3e4eced69d0692195ad470a9d5eaf56c257091f37e49bf889c71d1a0b80ba3853e39e7678e2a585f75b1ee57ab33c12c1e98ef37", 0xc8}, {&(0x7f0000000340)="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", 0x1000}], 0x2, 0x5, 0x5) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) write$binfmt_aout(r5, &(0x7f0000001500)={{0x10b, 0x75, 0x1f, 0x10f, 0x3a1, 0x0, 0x3b8, 0x8}, "1912b4613213ccea730365d19718bf07a169cd0815e921e9a8bd8b6322ecba8cd7c18b071117e02c05916f15259d0ee420e44ec9215fc8e3e720c698237947455c2f5ee0adf19b44bf4267f582e193a8d16f8a645b49643a4b155dee5ab2", ['\x00']}, 0x17e) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r6, 0x5600, 0x0) io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x9, r6, &(0x7f0000001340)="7a6d2f55e1c534a7de2261b3093d409dfff6374afe60878306f9126497a4fa3b0c7b7024afc80a15e59602e0a92473059785bfd0d1323145138d0c341ad3702260fbde1c94ae3a40697312e25af55d4560c64a7d1807eee5903ec6d2f8633375edec40ccd5c5bdef8c573a374171ee367a5f3a940c1be696e448c560eb71e448b7394858c91a9a10b396761ac2f61037369d83257f85497fe405c9e52d3ce40077a370a3564a381dc0f6098d1c7d3c", 0xaf, 0x2ba, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000001400)="e8511642748a4dc857be96a0bba26ceda623c51f3bc890b1ffed07cf03652b1012c2a90ec4d12764f9fd77b8954d07d186499cff999a4da4ee26e0a78a16e4d77738a1146b055207c60823a11be25f97df57474c8f044f6049acb42aaf882bd915260c41ded76361a1259d511af121d22e30835fbeb87f946f19c3890c88def740d72ef1ab7c6cb999dde985d172e7478dc7f69e7e5cf27fa9f301452d1aa46a1919e58180f81d008572f100abd13ef2ca211c03d1797a918c22c50b1eb56c92a210df07df4d8f03c88590f65e65c1bad958161969a1e021403fe3a368", 0xdd, 0x7, 0x0, 0x3}]) [ 2605.206467] syz-executor.0: attempt to access beyond end of device [ 2605.206467] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2605.208037] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2605.210288] loop5: detected capacity change from 0 to 40 22:22:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) pwritev2(r3, &(0x7f00000006c0), 0x9, 0xfff, 0x1000, 0xe) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2605.333899] syz-executor.6: attempt to access beyond end of device [ 2605.333899] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2605.335881] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2605.357279] loop3: detected capacity change from 0 to 40 22:22:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x10c02, 0x2c) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x28) [ 2605.460646] loop4: detected capacity change from 0 to 40 22:22:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2605.519865] loop3: detected capacity change from 0 to 40 22:22:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2605.598338] loop0: detected capacity change from 0 to 40 [ 2605.603322] loop5: detected capacity change from 0 to 40 22:22:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2605.619641] loop4: detected capacity change from 0 to 40 [ 2605.640680] loop1: detected capacity change from 0 to 40 [ 2605.662191] FAT-fs (loop1): invalid media value (0x00) [ 2605.663012] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2605.694336] loop3: detected capacity change from 0 to 40 [ 2605.736321] syz-executor.0: attempt to access beyond end of device [ 2605.736321] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2605.737524] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2605.792453] syz-executor.0: attempt to access beyond end of device [ 2605.792453] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2605.792542] syz-executor.6: attempt to access beyond end of device [ 2605.792542] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2605.793403] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2605.795428] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2605.943585] loop2: detected capacity change from 0 to 40 [ 2605.952579] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 2621.702707] loop0: detected capacity change from 0 to 40 22:22:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f00000006c0)=@IORING_OP_SEND={0x1a, 0x7, 0x0, r4, 0x0, &(0x7f00000005c0)="f3a2e8df72dcd55f311bc04e290c847088f45fbe6446cf40c52b248c77f675928787be45feaa08506cb5474858c2e99270638b8c5cb279c815f7836e927077a5baeea7b684a551d0a746091b31d3513c76fe856d61dabb5b7d712d4d25bdc9972e24d471a0a5a02d88adcb41b08d623b47168f8cde78e96e0c369cf2f908a14717b24c981a8038803210714438ecf890725ba0580e0c42e9cf2010ea23220c98168bcefdcfc28dc87f40a7f12d7ddfd2c81917b8c4f02c07e747370639e0f3c5cef2d7353f22f9488585d1b4e42853db64262e4ee0", 0xd5, 0x4000, 0x1}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010003000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r6 = openat(r5, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@random={'security.', '(o(\x92-*/-\x00'}, &(0x7f0000000500)=""/84, 0x54) sendfile(r6, r7, 0x0, 0x7fffffff) lseek(r6, 0x7fffffff, 0x1) r8 = syz_open_dev$hidraw(&(0x7f0000000040), 0x200, 0x30c502) clone3(&(0x7f00000003c0)={0x5110000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x27}, &(0x7f0000000240)=""/6, 0x6, &(0x7f0000000300)=""/82, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x9, {r1}}, 0x58) r10 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x0, 0xfffffffffffd, 0x0, 0x2, 0x0, 0xd708, 0x0, 0x0, 0x800}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r10, 0x5600, 0x0) dup3(r8, r10, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 22:22:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) creat(&(0x7f0000000040)='./file1\x00', 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:22:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r3, 0x0, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2621.752370] loop7: detected capacity change from 0 to 40 [ 2621.760478] loop1: detected capacity change from 0 to 40 [ 2621.767852] FAT-fs (loop7): bogus number of reserved sectors [ 2621.768617] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2621.769125] loop3: detected capacity change from 0 to 40 [ 2621.771757] loop5: detected capacity change from 0 to 40 [ 2621.773407] loop2: detected capacity change from 0 to 40 [ 2621.774309] loop6: detected capacity change from 0 to 40 [ 2621.777550] loop4: detected capacity change from 0 to 40 [ 2621.779475] FAT-fs (loop1): invalid media value (0x00) [ 2621.780567] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2621.831934] syz-executor.0: attempt to access beyond end of device [ 2621.831934] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2621.833752] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2621.884259] syz-executor.2: attempt to access beyond end of device [ 2621.884259] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2621.885971] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2621.887270] syz-executor.6: attempt to access beyond end of device [ 2621.887270] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2621.888940] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2621.894882] syz-executor.6: attempt to access beyond end of device [ 2621.894882] loop6: rw=2049, sector=44, nr_sectors = 8 limit=40 22:22:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2621.954712] syz-executor.6: attempt to access beyond end of device [ 2621.954712] loop6: rw=2049, sector=52, nr_sectors = 8 limit=40 22:23:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000240)=""/139, 0x8b) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) openat(r0, &(0x7f0000000180)='./file0\x00', 0x800, 0x1a9) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) 22:23:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2622.079901] loop5: detected capacity change from 0 to 40 22:23:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) connect(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) [ 2622.142119] loop4: detected capacity change from 0 to 40 22:23:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x101442, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r5, 0x0, r6, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x40000, 0x6) syz_open_procfs(r5, &(0x7f0000000080)='net/ip6_tables_names\x00') sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:23:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2622.202553] loop1: detected capacity change from 0 to 40 [ 2622.230509] loop2: detected capacity change from 0 to 40 [ 2622.237675] FAT-fs (loop1): invalid media value (0x00) [ 2622.239055] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2622.279794] loop3: detected capacity change from 0 to 40 [ 2622.296150] syz-executor.2: attempt to access beyond end of device [ 2622.296150] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2622.297651] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2622.307220] loop5: detected capacity change from 0 to 40 [ 2622.312040] loop0: detected capacity change from 0 to 40 [ 2622.331668] syz-executor.2: attempt to access beyond end of device [ 2622.331668] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2622.333414] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2622.395905] loop6: detected capacity change from 0 to 40 [ 2622.455200] syz-executor.0: attempt to access beyond end of device [ 2622.455200] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2622.456758] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2622.566147] syz-executor.6: attempt to access beyond end of device [ 2622.566147] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2622.627148] syz-executor.6: attempt to access beyond end of device [ 2622.627148] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2622.628662] Buffer I/O error on dev loop6, logical block 10, async page read [ 2622.638626] Buffer I/O error on dev loop6, logical block 10, async page read [ 2622.641968] Buffer I/O error on dev loop6, logical block 10, async page read 22:23:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2636.775655] loop0: detected capacity change from 0 to 40 [ 2636.775687] loop7: detected capacity change from 0 to 40 22:23:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000240)=""/139, 0x8b) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) openat(r0, &(0x7f0000000180)='./file0\x00', 0x800, 0x1a9) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) [ 2636.794906] FAT-fs (loop7): bogus number of reserved sectors [ 2636.795312] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2636.798294] loop6: detected capacity change from 0 to 40 [ 2636.798559] loop3: detected capacity change from 0 to 40 [ 2636.799554] loop5: detected capacity change from 0 to 40 22:23:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file2\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="c4cbed2bf9e7c019c0207a6332e048f35bedffdb5c17f5b3225e42bbb67441a8ea1dbb03ed9247e502", 0x29, 0x9}, {&(0x7f0000000280)="309b7b2e42cc5c118eb8d889d23a783126a89b51df5443379fb870c0005a2f03af3dc64133504157fdf7fa4e2157288741ae1014481a1648c971d8e2737215a2ab95a26c0228fdb20fa6813571b998b097cb55431a26ff56fa05eed5adcc765a6232a000f6f310e57f6475f95f0fc00427240c260dddd5b5729aa5fa90d91ca8339378c73ede0f90846cecaf2798da0851ae4509532c7290ad97273cefe54269d92eed2a62144ad1e91180be396bd397a657660d46e93e5cfaf972b40c4d58a070eebb90cc1e9af2e316", 0xca, 0x10001}, {&(0x7f0000000380)="5f54da52036624a15800ab3733247ae4875a3c68dd9f1c82f5109498e114af6249c9371672928571a12519d8b5dcc1a06ecfc152eb284ba99db1885187c423f155784c36508a523361138252b70695af38ca9f76fd321fba83356b23cd31fe053d083294dc875581403041", 0x6b, 0xfffffffffffffff7}], 0x40008, &(0x7f0000000480)={[{@dots}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@measure}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@uid_lt}]}) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x202040, 0x38) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xa, 0x20, 0x6c, 0x40, 0x0, 0x45, 0x80, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000500), 0xa}, 0x100, 0x8, 0x401, 0x4, 0x1ff, 0x1, 0x1000, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r5, 0x8) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, r2, 0x0, 0xfffffdef) 22:23:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r4, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2636.817085] loop1: detected capacity change from 0 to 40 [ 2636.826651] FAT-fs (loop1): invalid media value (0x00) [ 2636.827103] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2636.872138] loop2: detected capacity change from 0 to 40 [ 2636.881267] bio_check_eod: 2 callbacks suppressed [ 2636.881278] syz-executor.6: attempt to access beyond end of device [ 2636.881278] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2636.882473] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2636.906124] syz-executor.0: attempt to access beyond end of device [ 2636.906124] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2636.907030] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2636.977922] syz-executor.2: attempt to access beyond end of device [ 2636.977922] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2636.979658] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:23:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) 22:23:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x101442, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r5, 0x0, r6, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x40000, 0x6) syz_open_procfs(r5, &(0x7f0000000080)='net/ip6_tables_names\x00') sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2637.005404] loop0: detected capacity change from 0 to 40 22:23:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2637.051517] loop3: detected capacity change from 0 to 40 [ 2637.057342] loop1: detected capacity change from 0 to 40 [ 2637.061670] syz-executor.2: attempt to access beyond end of device [ 2637.061670] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2637.063590] FAT-fs (loop1): invalid media value (0x00) [ 2637.063606] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2637.065157] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:23:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2637.115587] syz-executor.3: attempt to access beyond end of device [ 2637.115587] loop3: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2637.200669] loop5: detected capacity change from 0 to 40 [ 2637.261542] loop0: detected capacity change from 0 to 40 22:23:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) 22:23:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r3, 0x0, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) openat(r5, &(0x7f0000000080)='./file0\x00', 0x86240, 0x14) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x21) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x7fffffff) sendfile(r3, r0, 0x0, 0xfffffdef) [ 2651.832643] loop1: detected capacity change from 0 to 40 [ 2651.836152] loop7: detected capacity change from 0 to 40 [ 2651.839552] FAT-fs (loop1): invalid media value (0x00) [ 2651.840009] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2651.841072] loop3: detected capacity change from 0 to 40 [ 2651.843030] loop4: detected capacity change from 0 to 40 [ 2651.847466] FAT-fs (loop7): bogus number of reserved sectors [ 2651.847987] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2651.852199] loop0: detected capacity change from 0 to 40 [ 2651.861411] loop5: detected capacity change from 0 to 40 22:23:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="899caf5f26f0205cf6526f7f687e83ac29c10279e70a72767e3bed94906dfd0a9080cdd5625334cdd73b9bcb242b743a2a1887e413c31b067073961ade1354d0b8adff8ebf5b2caa3392c3c2aba5a35857c58b3fcd3e64feba8d513d7c0633702f0ac826b23d875a331e69f23a92f08b12d137409512ebd7a06e7e7ba2dfb15fb8", @ANYBLOB="6a73fafb3e6c03e4761f86651544c4593fdcf2a69c0dfc9047375e1b240ed84790f99e08f39b2ab63c94f64d44a91c7ee706493ba2dd3862ea4f76bc8746da531a1c9af846228e22ab0351b9bece3f164c3708006d8fc82255b3c104e37092ced0b9524133e9951e79f2848d866ac30bcb3c49cae05ab9aef33ef428e016181124e25d512a92d497470bf83bd07788a8103d4102b62e2f1e513dfb9c8854324e73c83bee5df8149a3db7e4d7aa40d6158c8da2c30d14de589287d4da3d1aa46987854bb00c8470e32562f9dae3bd2a1748b67c916a2371db19ed9f8dc5ba0749e32863f1dfaaeec089c30d0264babe", @ANYRES64, @ANYRESOCT, @ANYRES32=r0], 0x1d9) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r4, &(0x7f00000001c0)='./file1/../file0\x00', 0x111001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = creat(&(0x7f00000000c0)='./file1/../file0\x00', 0x20) setsockopt$inet6_buf(r6, 0x29, 0x23, &(0x7f0000000180), 0x0) r7 = open$dir(&(0x7f0000000040)='./file1/../file0\x00', 0x600000, 0x16) r8 = openat(r7, &(0x7f0000000080)='./file1\x00', 0x121dc2, 0xc9) sendfile(r5, r8, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000180)="7667f7", 0x3) 22:23:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2651.891985] loop6: detected capacity change from 0 to 40 [ 2651.897165] loop2: detected capacity change from 0 to 40 [ 2651.942220] syz-executor.3: attempt to access beyond end of device [ 2651.942220] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2651.943189] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2651.943839] syz-executor.3: attempt to access beyond end of device [ 2651.943839] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 22:23:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) openat(r4, &(0x7f00000004c0)='./file1\x00', 0x30000, 0xc) 22:23:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r3, 0x0, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2652.141297] loop3: detected capacity change from 0 to 40 [ 2652.144623] loop4: detected capacity change from 0 to 40 [ 2652.166108] loop0: detected capacity change from 0 to 40 [ 2652.193029] loop1: detected capacity change from 0 to 40 [ 2652.207038] loop5: detected capacity change from 0 to 40 [ 2652.225468] FAT-fs (loop1): bogus number of FAT sectors [ 2652.226671] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2652.233380] syz-executor.6: attempt to access beyond end of device [ 2652.233380] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2652.236689] syz-executor.6: attempt to access beyond end of device [ 2652.236689] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2652.238577] Buffer I/O error on dev loop6, logical block 10, async page read [ 2652.240333] syz-executor.3: attempt to access beyond end of device [ 2652.240333] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2652.242177] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2652.244963] syz-executor.3: attempt to access beyond end of device [ 2652.244963] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2652.266876] syz-executor.6: attempt to access beyond end of device [ 2652.266876] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2652.268911] Buffer I/O error on dev loop6, logical block 10, async page read [ 2652.284044] syz-executor.2: attempt to access beyond end of device [ 2652.284044] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2652.285049] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2652.287277] syz-executor.6: attempt to access beyond end of device [ 2652.287277] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2652.288175] Buffer I/O error on dev loop6, logical block 10, async page read 22:23:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:30 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x40008, &(0x7f0000000180)='vfat\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:23:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r3, 0x0, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2652.434945] loop3: detected capacity change from 0 to 40 [ 2652.464559] syz-executor.3: attempt to access beyond end of device [ 2652.464559] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2652.465493] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2652.495029] loop6: detected capacity change from 0 to 40 [ 2652.506238] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2652.530516] Buffer I/O error on dev loop6, logical block 10, async page read [ 2652.589011] loop5: detected capacity change from 0 to 40 22:23:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) faccessat2(r0, &(0x7f0000000980)='./file1\x00', 0x1a1, 0x1200) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) recvmmsg$unix(r4, &(0x7f0000001140)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/202, 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)=""/55, 0x37}], 0x1, &(0x7f0000000980)}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/177, 0xb1}, {&(0x7f0000000bc0)=""/154, 0x9a}, {&(0x7f0000000c80)=""/128, 0x80}, {&(0x7f0000000d00)=""/15, 0xf}, {&(0x7f0000000d40)=""/113, 0x71}], 0x6, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/37, 0x25}, {&(0x7f0000000f40)=""/142, 0x8e}, {&(0x7f0000001000)=""/37, 0x25}], 0x3, &(0x7f0000001080)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x4, 0x80, &(0x7f0000001240)={0x0, 0x3938700}) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x5) flistxattr(r5, &(0x7f0000001300)=""/191, 0xbf) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000001280), &(0x7f00000012c0)='./file2\x00', 0x8, 0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) pwritev(r6, &(0x7f0000000680)=[{&(0x7f0000000040)="bf3106120b40d068d6921c2ab01a0cf2779538131d4e09cf0f16202a471a598685bd72e221c73fd61bfdaa6fa3bcb5c3bdf591d90e24daba78347fca2454d34560ef3e2ad4ca7ca667990d18f3fc1b0efcf7b9e91a768a94f56ad0c5903d5b400f46900f212201d2cc1b268c792cfe732902d460a49f", 0x76}, {&(0x7f0000000240)="55677fe821e3157e5e35b62833ea88ac65d8dc54fffb50eb15e8068abe91d162142cc42b1604069914ee7e692e616b3a6e93cd022d84e4973786dda064bcf38ae597fbfbb9a2ac86595bc52f42c7a03b3e067dd16ff88cf38a3f04f1a70bee9fcbc52308961ac6da002e0c5e360eb1e09f5ed0b3417ddd087bc6e111e530177ba42bfd40f84269a4fc09b800ad4ec249d37be9169e391eec0fa05cc44526984c7cde8d1ae97ca8944b78d71e0c452261996b", 0xb2}, {&(0x7f0000000180)="3d47e688c2af5bf668687bfe670335a8465a5c8b2fd2ea461f6ba692223878a82cfd9eb45e800599379fece0b9d9d47d95f060006cf27c168f085246f28243e6590e8b24ab12ab35f04e7f1d223950c3d3e412249074b5e83e491db50cfce1d68428fb81fbba10bb2de43d625656a4f6fd2cfa2533cdc33d57bac2d819", 0x7d}, {&(0x7f0000000300)="4542e5697037d4e4a2b078e9c9afba25178bf386f57555fc652972cc83a8d4879baeeb206a74e8c9ae689a39ddda265ed31470bc27cb07a7b01f76f3a2609efb130113e4e6e684047f1ef2d18a41bf2fd1ab8f4d72a9057d6b4d86253549876fe81655226ec331a80813e25cef3d3b3c367828961f65d83c5959c0f47982f6d979ddf8f087", 0x85}, {&(0x7f00000003c0)="1fe5f5ab75acd844222c31320304fd03cbbd5187ef33f798432a44ceeabf362355ba286fc83c6c0b1fec2fa4c76ac1d5020e32090b6af4e16f0c8599148a4086e59e1e7271399c9d6ddeccfe06ccdaeb0b0c4c298cc5f5058690d9a4fe9f9890a3b77e9c7f3150b51be5183aabcf848d62957e4b7a4952bf05f923b40e4d444ed14d24929da96133c654887678925ad6b66fcc9e7643dcb898408ec8e7991428d4187ed94b6cc9b79d1a0c21d792a7d3525acd731531da22afbe2a59c2b28998791333a2b7ce76a202ad1601635014e56fb98c869f8d6f431368e2162a130dc271f5331e", 0xe4}, {&(0x7f00000000c0)="2a1b", 0x2}, {&(0x7f00000004c0)="e79e05f9484451e8d9c1ad33c92a02679a100ce42af82586188119109f54de26fde60ff7960084537c28ed56222aa7f81415ea2e1a47627c852f2b3a01e7264e86ea6d84e69e8da458dedba52a0bfbd0018bafe76e4e8a1197255471890457fe70329685a847388a51b0b7d9e453678eae62c34254870bb32dc26e3b60e31c0976e9e5b8fb4a49a0d5f8da7db2b99976bbb168bb2d4f7538254fc7e7af65fa90a68b63d45724941614e090bb4251793488", 0xb1}, {&(0x7f0000000580)="24358ceed7c706af9dab651e3c9d825371f1ce8bd52d424ee0999c07dce84ed5b890bd24c9b927d74faae35d2786efe1523beb4cc68f54bbe4e71686393734b795e7a356355ab287cf07ef", 0x4b}, {&(0x7f0000000600)="0f73ebe3c1b6c6f5b89ed8078fda25d067b461e37d2ec3002080483ae62932a1b7bd03a0ecc8e6b67c2c12b238c40d81ea8e1688d20f953b57bf01b2771aa21a93557ca16c98c50c9e135056099511b8937597c8fa7de2941b121e52a21b35dac708412e4304938dfecd4e81f5dfd65917b66a9df3ad3729f5d90515866a93ab", 0x80}], 0x9, 0x6a1, 0x20) 22:23:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x675) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) 22:23:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x100, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x3}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x2, 0x0, 0x0, 0x7a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x4000000000000fb2}, 0x0, 0x6, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x20400, 0x8) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xffffffffffffffcc) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x3, 0x1, 0x80, 0x0, 0x0, 0x9, 0x1005, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x5, @perf_config_ext={0x10001, 0x40}, 0x8048, 0x3, 0x0, 0x3, 0x800, 0x7, 0x0, 0x0, 0x17, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r4, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, r7, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x4, 0x45, 0x2d, 0x0, 0x1, 0x100, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0x6, 0x2}, 0x44c05, 0x100009, 0xffff0001, 0x9, 0x6, 0x5, 0x5, 0x0, 0x6, 0x0, 0x2000000}, 0x0, 0xb, r6, 0xb) 22:23:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2667.110931] loop4: detected capacity change from 0 to 40 [ 2667.138414] loop7: detected capacity change from 0 to 40 [ 2667.141050] loop1: detected capacity change from 0 to 40 [ 2667.143029] loop3: detected capacity change from 0 to 40 [ 2667.145666] loop5: detected capacity change from 0 to 40 [ 2667.147013] FAT-fs (loop1): bogus number of FAT sectors [ 2667.147431] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2667.148007] FAT-fs (loop7): bogus number of reserved sectors [ 2667.148446] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2667.166168] loop0: detected capacity change from 0 to 40 [ 2667.197574] loop2: detected capacity change from 0 to 40 [ 2667.199436] bio_check_eod: 4 callbacks suppressed [ 2667.199449] syz-executor.3: attempt to access beyond end of device [ 2667.199449] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2667.200707] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2667.202137] loop6: detected capacity change from 0 to 40 [ 2667.206379] syz-executor.3: attempt to access beyond end of device [ 2667.206379] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2667.215290] FAT-fs (loop2): invalid media value (0x00) [ 2667.216290] FAT-fs (loop2): Can't find a valid FAT filesystem 22:23:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2667.416191] syz-executor.6: attempt to access beyond end of device [ 2667.416191] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.425684] loop3: detected capacity change from 0 to 40 [ 2667.441411] syz-executor.6: attempt to access beyond end of device [ 2667.441411] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.443236] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.492357] syz-executor.3: attempt to access beyond end of device [ 2667.492357] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2667.492699] syz-executor.6: attempt to access beyond end of device [ 2667.492699] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.493345] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2667.495252] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.499289] syz-executor.3: attempt to access beyond end of device [ 2667.499289] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2667.501853] loop2: detected capacity change from 0 to 40 [ 2667.502675] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value 22:23:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:23:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = getpid() r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r1, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x675) [ 2667.625825] loop1: detected capacity change from 0 to 40 [ 2667.637314] loop4: detected capacity change from 0 to 40 [ 2667.659282] FAT-fs (loop1): bogus number of FAT sectors [ 2667.660370] FAT-fs (loop1): Can't find a valid FAT filesystem 22:23:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2667.678271] loop5: detected capacity change from 0 to 40 22:23:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x20) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2667.752544] loop0: detected capacity change from 0 to 40 22:23:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2667.854321] loop2: detected capacity change from 0 to 40 [ 2667.873602] loop3: detected capacity change from 0 to 40 [ 2667.936524] syz-executor.6: attempt to access beyond end of device [ 2667.936524] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.938488] Buffer I/O error on dev loop6, logical block 10, async page read 22:23:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2667.949914] syz-executor.6: attempt to access beyond end of device [ 2667.949914] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.950796] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.951311] syz-executor.6: attempt to access beyond end of device [ 2667.951311] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2667.952129] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.957157] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.960609] Buffer I/O error on dev loop6, logical block 10, async page read [ 2667.995884] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2668.025906] loop5: detected capacity change from 0 to 40 [ 2668.095438] loop1: detected capacity change from 0 to 40 22:24:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x1}, {0x0, 0x0, 0xfffffffffffffff7}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x83800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendfile(r2, r3, 0x0, 0x7fffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') sendfile(r1, r0, 0x0, 0xfffffdeb) 22:24:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x675) 22:24:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x58006, &(0x7f0000000180)={'trans=xen,', {[{@debug={'debug', 0x3d, 0xf}}, {@cachetag={'cachetag', 0x3d, '\xd6*)\\!})^'}}, {@access_any}], [{@fowner_gt={'fowner>', r4}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}}) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2684.160388] loop0: detected capacity change from 0 to 40 [ 2684.169321] loop2: detected capacity change from 0 to 16383 [ 2684.171424] FAT-fs (loop2): bogus number of FAT structure [ 2684.171845] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2684.179482] loop4: detected capacity change from 0 to 40 [ 2684.204360] loop2: detected capacity change from 0 to 16383 [ 2684.205273] loop6: detected capacity change from 0 to 40 [ 2684.213570] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 2684.221420] loop7: detected capacity change from 0 to 40 [ 2684.232820] FAT-fs (loop7): bogus number of reserved sectors [ 2684.233383] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2684.234326] loop3: detected capacity change from 0 to 40 [ 2684.245969] loop5: detected capacity change from 0 to 40 [ 2684.247003] loop1: detected capacity change from 0 to 40 [ 2684.254978] bio_check_eod: 5 callbacks suppressed [ 2684.254990] syz-executor.6: attempt to access beyond end of device [ 2684.254990] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.263822] syz-executor.6: attempt to access beyond end of device [ 2684.263822] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.264705] buffer_io_error: 2 callbacks suppressed [ 2684.264714] Buffer I/O error on dev loop6, logical block 10, async page read 22:24:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) getpid() ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) [ 2684.276351] syz-executor.6: attempt to access beyond end of device [ 2684.276351] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.277276] Buffer I/O error on dev loop6, logical block 10, async page read 22:24:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2684.290921] syz-executor.6: attempt to access beyond end of device [ 2684.290921] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.291830] Buffer I/O error on dev loop6, logical block 10, async page read [ 2684.318054] syz-executor.6: attempt to access beyond end of device [ 2684.318054] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.319127] Buffer I/O error on dev loop6, logical block 10, async page read [ 2684.320022] syz-executor.6: attempt to access beyond end of device [ 2684.320022] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.321121] Buffer I/O error on dev loop6, logical block 10, async page read [ 2684.344323] syz-executor.3: attempt to access beyond end of device [ 2684.344323] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2684.345390] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2684.353639] syz-executor.6: attempt to access beyond end of device [ 2684.353639] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.354579] Buffer I/O error on dev loop6, logical block 10, async page read [ 2684.369136] syz-executor.6: attempt to access beyond end of device [ 2684.369136] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2684.371241] Buffer I/O error on dev loop6, logical block 10, async page read 22:24:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/252, 0xfc}, {&(0x7f0000001400)=""/195, 0xc3}, {&(0x7f0000001500)=""/125, 0x7d}], 0x8, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001800)=""/219, 0xdb}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/222, 0xde}, {&(0x7f0000001a40)=""/37, 0x25}, {&(0x7f0000001a80)=""/193, 0xc1}], 0x5, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/253, 0xfd}, {&(0x7f0000001d80)=""/248, 0xf8}, {&(0x7f0000001e80)=""/66, 0x42}, {&(0x7f0000001f00)=""/34, 0x22}], 0x4, &(0x7f0000001f80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000003340)=[{&(0x7f0000002040)=""/196, 0xc4}, {&(0x7f0000002140)=""/22, 0x16}, {&(0x7f0000002180)=""/99, 0x63}, {&(0x7f0000002200)=""/54, 0x36}, {&(0x7f0000002240)=""/55, 0x37}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x7, &(0x7f00000033c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000003640)=[{&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/194, 0xc2}], 0x2, &(0x7f0000003680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003780)=""/34, 0x22}, {&(0x7f00000037c0)=""/148, 0x94}, {&(0x7f0000003880)=""/47, 0x2f}, {&(0x7f00000038c0)=""/203, 0xcb}, {&(0x7f00000039c0)=""/111, 0x6f}, {&(0x7f0000003a40)=""/197, 0xc5}, {&(0x7f0000003b40)=""/214, 0xd6}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/56, 0x38}], 0x9, &(0x7f0000003d80)}}], 0x7, 0x2004, &(0x7f0000003f80)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2684.422869] loop4: detected capacity change from 0 to 40 [ 2684.432365] loop0: detected capacity change from 0 to 40 22:24:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2684.479996] loop2: detected capacity change from 0 to 264192 [ 2684.579343] loop1: detected capacity change from 0 to 40 [ 2684.595645] loop5: detected capacity change from 0 to 40 22:24:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x23, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2684.673091] loop3: detected capacity change from 0 to 40 [ 2684.862935] loop6: detected capacity change from 0 to 40 [ 2684.898181] loop4: detected capacity change from 0 to 40 [ 2684.911515] syz-executor.3: attempt to access beyond end of device [ 2684.911515] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2684.913466] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2685.683166] loop6: detected capacity change from 0 to 40 22:24:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) getpid() ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) 22:24:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2701.816492] loop3: detected capacity change from 0 to 40 [ 2701.819500] loop5: detected capacity change from 0 to 40 22:24:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x40, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000040)) r5 = getpid() r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r5, 0x0, r6, 0x0) sendfile(r6, r0, 0x0, 0x100000fffffdee) [ 2701.848290] loop2: detected capacity change from 0 to 40 [ 2701.851683] loop1: detected capacity change from 0 to 40 [ 2701.855442] loop7: detected capacity change from 0 to 40 [ 2701.857552] loop4: detected capacity change from 0 to 40 [ 2701.861073] loop0: detected capacity change from 0 to 40 [ 2701.870642] loop6: detected capacity change from 0 to 40 [ 2701.874256] FAT-fs (loop7): bogus number of reserved sectors [ 2701.875159] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2701.946494] syz-executor.3: attempt to access beyond end of device [ 2701.946494] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.948368] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2701.974552] syz-executor.2: attempt to access beyond end of device [ 2701.974552] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.976123] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2701.980102] syz-executor.3: attempt to access beyond end of device [ 2701.980102] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2701.982330] syz-executor.6: attempt to access beyond end of device [ 2701.982330] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2702.012780] syz-executor.6: attempt to access beyond end of device [ 2702.012780] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2702.014630] Buffer I/O error on dev loop6, logical block 10, async page read [ 2702.026342] syz-executor.6: attempt to access beyond end of device [ 2702.026342] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2702.028050] Buffer I/O error on dev loop6, logical block 10, async page read 22:24:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r2, 0x0, r3, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) getpid() ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) [ 2702.212011] loop5: detected capacity change from 0 to 40 22:24:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) r7 = accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) r9 = socket$inet(0x2, 0x0, 0x9) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)={0x5, 0x2, 0x5, 0x0, 0x0, [{{r7}}, {{r0}, 0x8001}, {{r0}, 0x7fffffff}, {{r8}, 0x4}, {{r9}, 0x6}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r2, r5, r5, r6], 0x5) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2702.236368] loop3: detected capacity change from 0 to 40 [ 2702.254324] loop4: detected capacity change from 0 to 40 [ 2702.329351] loop1: detected capacity change from 0 to 40 [ 2702.344011] loop0: detected capacity change from 0 to 40 [ 2702.368211] loop6: detected capacity change from 0 to 40 [ 2702.371868] syz-executor.3: attempt to access beyond end of device [ 2702.371868] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2702.373456] Buffer I/O error on dev loop3, logical block 10, lost async page write 22:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2702.397847] syz-executor.3: attempt to access beyond end of device [ 2702.397847] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 22:24:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2eff}, 0x140, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r6, 0x0, r7, 0x0) getpid() write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRESOCT=r3, @ANYRESDEC, @ANYRES64=r4, @ANYRESDEC=r5, @ANYRES32, @ANYRES32], 0x220) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2702.490768] syz-executor.6: attempt to access beyond end of device [ 2702.490768] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2702.523250] loop5: detected capacity change from 0 to 40 22:24:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2702.571222] syz-executor.6: attempt to access beyond end of device [ 2702.571222] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2702.572843] Buffer I/O error on dev loop6, logical block 10, async page read [ 2702.573959] Buffer I/O error on dev loop6, logical block 10, async page read [ 2702.580576] loop2: detected capacity change from 0 to 40 [ 2702.595890] Buffer I/O error on dev loop6, logical block 10, async page read 22:24:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x675) [ 2702.656399] loop1: detected capacity change from 0 to 40 [ 2702.711986] loop4: detected capacity change from 0 to 40 [ 2702.751639] loop3: detected capacity change from 0 to 40 22:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2702.805257] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:24:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2702.841456] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2702.853546] loop0: detected capacity change from 0 to 40 22:24:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2702.924219] loop7: detected capacity change from 0 to 40 22:24:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) getpid() write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2702.959164] FAT-fs (loop7): invalid media value (0x00) [ 2702.959941] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2702.966179] loop5: detected capacity change from 0 to 40 [ 2703.034540] loop1: detected capacity change from 0 to 40 22:24:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2703.067447] loop4: detected capacity change from 0 to 40 22:24:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x34042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2703.168103] loop3: detected capacity change from 0 to 40 22:24:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2703.247986] loop0: detected capacity change from 0 to 40 [ 2703.271297] loop2: detected capacity change from 0 to 40 22:24:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2703.447362] loop5: detected capacity change from 0 to 40 [ 2703.508444] loop1: detected capacity change from 0 to 40 22:24:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U-', 0x1}, 0x16, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2717.610101] loop7: detected capacity change from 0 to 40 22:24:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:24:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="e3", 0x1, 0x0, &(0x7f0000000240)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendfile(r2, r1, 0x0, 0xfffffdef) 22:24:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2717.621136] loop5: detected capacity change from 0 to 40 [ 2717.636607] FAT-fs (loop7): invalid media value (0x00) [ 2717.637160] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2717.646162] loop0: detected capacity change from 0 to 40 [ 2717.664039] loop3: detected capacity change from 0 to 40 [ 2717.670409] loop6: detected capacity change from 0 to 40 [ 2717.675372] loop1: detected capacity change from 0 to 40 [ 2717.711647] loop2: detected capacity change from 0 to 40 [ 2717.714095] loop4: detected capacity change from 0 to 40 22:24:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2717.744709] bio_check_eod: 13 callbacks suppressed [ 2717.745143] syz-executor.3: attempt to access beyond end of device [ 2717.745143] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2717.746105] buffer_io_error: 5 callbacks suppressed [ 2717.746114] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2717.748387] syz-executor.3: attempt to access beyond end of device [ 2717.748387] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 22:24:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2717.823480] syz-executor.1: attempt to access beyond end of device [ 2717.823480] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2717.824806] loop5: detected capacity change from 0 to 40 [ 2717.833165] syz-executor.2: attempt to access beyond end of device [ 2717.833165] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2717.834087] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2717.848077] syz-executor.6: attempt to access beyond end of device [ 2717.848077] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2717.849904] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:24:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2717.902637] loop5: detected capacity change from 0 to 40 [ 2717.923626] loop0: detected capacity change from 0 to 40 22:24:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2717.995218] loop5: detected capacity change from 0 to 40 22:24:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x44b43, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)) sendfile(0xffffffffffffffff, r3, &(0x7f0000000180)=0xfffffffffffffffd, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x140, 0x8}, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 22:24:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:24:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2718.075416] loop2: detected capacity change from 0 to 40 [ 2718.098609] loop4: detected capacity change from 0 to 40 [ 2718.101917] loop1: detected capacity change from 0 to 40 [ 2718.115921] syz-executor.1: attempt to access beyond end of device [ 2718.115921] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2718.137463] loop3: detected capacity change from 0 to 40 [ 2718.221358] syz-executor.3: attempt to access beyond end of device [ 2718.221358] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2718.222186] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2718.222807] syz-executor.3: attempt to access beyond end of device [ 2718.222807] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2731.100793] loop5: detected capacity change from 0 to 40 [ 2731.103164] loop6: detected capacity change from 0 to 40 22:24:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r0, 0x0, 0xfffffdef) 22:24:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:24:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:24:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:24:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="3483d1610a56ca3faafc35b517b8dbef9bad1e1e98f11d21271488fc2b0a45f093f524a801d46678a512e2b1dd3b849edc5aee3673b41450dec303a0e8d5f93681f603305a61185da7c3dbcfdab2bd4b02166d0766e4c43eb8a1c591aa3189438e14303be96b8053a0360eb283b92cbb562769c4759356717f16a58c2b78d7667c5399da833d8342", 0x88, 0x6}, {&(0x7f00000000c0)="491bcf47fe2aad5314e871152c52adb68b", 0x11, 0x8}], 0x800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="82958339e4cd3f844cf882d4fa31edd32c7ea3f0dba74f0f34ba211f352f5bd7803e2bac8922d6606396fe8bf0674e5a014fb6ff4ecece7e683d7d5e7895f7c33a59c129e5a18502b3cf2ef9776a6160f4be4a547bda4281d842bfda903ee5e38c4a3b6ae39ef8bf5fc54faf2ae993258963ace8f4a5c8698777c0ee02740624ca122ad1073f974e7dba6288cac751b26d3fd28d73de51df80fa492c8c88015ba1dd1d25db7c32313b9ee78dbf7680498ec572cd9a84664550d6300d2c660e149f9e5f2d53e9075e0bfa6cd0e355d502f8"], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2731.112820] loop1: detected capacity change from 0 to 40 [ 2731.123584] loop4: detected capacity change from 0 to 40 [ 2731.135493] syz-executor.6: attempt to access beyond end of device [ 2731.135493] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2731.146294] syz-executor.1: attempt to access beyond end of device [ 2731.146294] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2731.154534] loop3: detected capacity change from 0 to 40 [ 2731.156682] syz-executor.6: attempt to access beyond end of device [ 2731.156682] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2731.157549] Buffer I/O error on dev loop6, logical block 10, async page read [ 2731.162823] syz-executor.6: attempt to access beyond end of device [ 2731.162823] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2731.163631] Buffer I/O error on dev loop6, logical block 10, async page read [ 2731.173691] syz-executor.6: attempt to access beyond end of device [ 2731.173691] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2731.174568] Buffer I/O error on dev loop6, logical block 10, async page read [ 2731.178365] loop7: detected capacity change from 0 to 40 [ 2731.180164] loop0: detected capacity change from 0 to 40 [ 2731.192950] FAT-fs (loop2): bogus number of reserved sectors [ 2731.194047] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2731.195390] FAT-fs (loop7): invalid media value (0x00) [ 2731.196167] syz-executor.3: attempt to access beyond end of device [ 2731.196167] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2731.196194] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2731.196257] syz-executor.3: attempt to access beyond end of device [ 2731.196257] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 2731.197838] FAT-fs (loop7): Can't find a valid FAT filesystem 22:24:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:24:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2731.283357] loop5: detected capacity change from 0 to 40 [ 2731.285636] loop1: detected capacity change from 0 to 40 [ 2731.339821] syz-executor.1: attempt to access beyond end of device [ 2731.339821] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2732.022252] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value 22:25:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x62) 22:25:03 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x1, 0x3, &(0x7f0000001300)=[{&(0x7f0000000180)="5c9913b714fa076d7cd138559790a15360119ca176485c816f5159afe79ba6ec2629cbd4bc3e440446a055f201a4d7f2a4727067556f24604fbc78cb351a299c5c23f7d74239", 0x46, 0x60000000000}, {&(0x7f0000000240)="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", 0x1000, 0x20}, {&(0x7f0000001240)="b1d037469d45b015949e50683d774d7cc2a762c0bab3f5d52117df1aaadb7c78cd42bedab3c248bb639e5526e3602fbdc7da9d3f28f864b93a541edd839332b34a72ed482c39a165c3322714a8b5a488245c832c828881c5cf6c712b78f541576d3809c32db53456fd2b165a57ffb9e271a2b24eea40792837a13769edb29171ca3749cd845661f8a97687a0", 0x8c, 0x8000}], 0x860440, &(0x7f0000001380)={[{@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@errors_continue}], [{@context={'context', 0x3d, 'staff_u'}}, {@measure}]}) openat(r3, &(0x7f00000000c0)='./file2\x00', 0x709001, 0x40) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:25:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 22:25:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:25:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2745.541638] loop4: detected capacity change from 0 to 40 [ 2745.553058] loop5: detected capacity change from 0 to 40 [ 2745.565282] loop2: detected capacity change from 0 to 40 [ 2745.588628] loop7: detected capacity change from 0 to 40 [ 2745.600184] loop3: detected capacity change from 0 to 40 [ 2745.607375] loop1: detected capacity change from 0 to 40 [ 2745.607642] FAT-fs (loop7): invalid media value (0x00) [ 2745.608512] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2745.612102] loop6: detected capacity change from 0 to 40 22:25:03 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) 22:25:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) [ 2745.649264] syz-executor.3: attempt to access beyond end of device [ 2745.649264] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.650262] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2745.660682] syz-executor.3: attempt to access beyond end of device [ 2745.660682] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 2745.703037] syz-executor.2: attempt to access beyond end of device [ 2745.703037] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.704003] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2745.704683] syz-executor.1: attempt to access beyond end of device [ 2745.704683] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2745.715360] syz-executor.6: attempt to access beyond end of device [ 2745.715360] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2745.715636] syz-executor.2: attempt to access beyond end of device [ 2745.715636] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.717753] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2745.720049] syz-executor.6: attempt to access beyond end of device [ 2745.720049] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2745.721596] Buffer I/O error on dev loop6, logical block 10, async page read [ 2745.724270] syz-executor.6: attempt to access beyond end of device [ 2745.724270] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2745.726125] Buffer I/O error on dev loop6, logical block 10, async page read [ 2745.727824] loop4: detected capacity change from 0 to 40 [ 2745.745634] syz-executor.6: attempt to access beyond end of device [ 2745.745634] loop6: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2745.747396] Buffer I/O error on dev loop6, logical block 10, async page read [ 2745.762395] loop5: detected capacity change from 0 to 40 22:25:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:03 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2745.986085] loop3: detected capacity change from 0 to 40 [ 2746.032506] syz-executor.3: attempt to access beyond end of device [ 2746.032506] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.033527] Buffer I/O error on dev loop3, logical block 10, lost async page write 22:25:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) 22:25:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) [ 2760.614278] loop3: detected capacity change from 0 to 40 [ 2760.617572] loop4: detected capacity change from 0 to 40 22:25:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x8000000000000001}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES64]) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "dfb72fd092eed4ce37377c12d6395fb58f19517d"}, 0x15, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x18) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000002c0)={0x2, 0x3}) sendfile(r2, r3, 0x0, 0x7fffffff) openat$incfs(0xffffffffffffffff, &(0x7f00000006c0)='.log\x00', 0x50082, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x400141, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$P9_RAUTH(r4, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x40, 0x2, 0x8}}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(r5, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)={{r6, r7/1000+60000}, {0x77359400}}, 0x0) 22:25:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) 22:25:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:25:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2760.630849] loop2: detected capacity change from 0 to 8192 [ 2760.641070] loop5: detected capacity change from 0 to 40 [ 2760.647073] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 2760.650525] loop1: detected capacity change from 0 to 40 [ 2760.675627] loop7: detected capacity change from 0 to 40 [ 2760.688248] loop6: detected capacity change from 0 to 40 [ 2760.690899] FAT-fs (loop6): invalid media value (0x00) [ 2760.691262] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2760.699828] FAT-fs (loop7): invalid media value (0x00) [ 2760.700615] FAT-fs (loop7): Can't find a valid FAT filesystem 22:25:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:25:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) [ 2760.719830] loop2: detected capacity change from 0 to 8192 [ 2760.721228] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value 22:25:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2760.776249] loop4: detected capacity change from 0 to 40 [ 2760.789420] bio_check_eod: 1 callbacks suppressed [ 2760.789443] syz-executor.1: attempt to access beyond end of device [ 2760.789443] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2760.855692] loop3: detected capacity change from 0 to 40 22:25:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) 22:25:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 22:25:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, r4, 0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xfffffff4}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x1f, 0x8, 0x1, 0x0, 0x545, 0x2280, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x103, 0x8a8, 0x5, 0x4, 0x4e, 0x1, 0xffff, 0x0, 0x7fffffff, 0x0, 0x3}, r4, 0x10, r6, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$TUNSETGROUP(r8, 0x400454ce, 0x0) 22:25:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2760.969305] loop5: detected capacity change from 0 to 40 [ 2761.043513] loop3: detected capacity change from 0 to 40 [ 2761.058612] loop1: detected capacity change from 0 to 40 [ 2761.059525] FAT-fs (loop2): bogus number of reserved sectors [ 2761.060298] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2761.116592] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 2761.161901] syz-executor.1: attempt to access beyond end of device [ 2761.161901] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2776.805091] loop3: detected capacity change from 0 to 40 [ 2776.820915] loop2: detected capacity change from 0 to 40 [ 2776.823545] loop1: detected capacity change from 0 to 40 22:25:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 22:25:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:25:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:25:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x4010052, r2, 0x0) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/4096, 0xfffffffffffffeaa}], 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000001000000000696c653100000000"]) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x3) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000080)='./file0\x00', 0x100, 0x20000, 0x23456, {0x0, r7}}, 0x10000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r8, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000000)='./file0\x00', 0x183840, 0x122) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x7fffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e20033008080000008021100000108"], 0x100}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @void}}, ["", ""]}, 0x24}}, 0x4008010) sendfile(r2, r1, 0x0, 0xfffffdef) 22:25:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) [ 2776.828649] loop4: detected capacity change from 0 to 40 [ 2776.843580] loop6: detected capacity change from 0 to 40 [ 2776.846114] FAT-fs (loop6): invalid media value (0x00) [ 2776.846507] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2776.869000] syz-executor.1: attempt to access beyond end of device [ 2776.869000] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2776.873688] loop7: detected capacity change from 0 to 40 [ 2776.877277] loop5: detected capacity change from 0 to 40 [ 2776.881955] FAT-fs (loop7): invalid media value (0x00) [ 2776.882331] FAT-fs (loop7): Can't find a valid FAT filesystem 22:25:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) 22:25:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:25:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 2776.961389] syz-executor.2: attempt to access beyond end of device [ 2776.961389] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.962350] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:25:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2777.058333] loop3: detected capacity change from 0 to 40 [ 2777.062014] loop4: detected capacity change from 0 to 40 22:25:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 22:25:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2777.141150] loop1: detected capacity change from 0 to 40 22:25:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2777.154682] loop5: detected capacity change from 0 to 40 [ 2777.203933] syz-executor.1: attempt to access beyond end of device [ 2777.203933] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 22:25:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 22:25:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2790.629615] loop4: detected capacity change from 0 to 40 22:25:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2790.651588] loop2: detected capacity change from 0 to 40 22:25:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:25:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 22:25:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) 22:25:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_enter(r3, 0x6f56, 0x7e8f, 0x1, &(0x7f0000000040)={[0x7fffffff]}, 0x8) r4 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)="cf54a9cf3e0a0bd8539951c4384947120b26a6ffd2daeb7e1270bc8a314c955d845fc1c24c52ab6ddf319c7a9dc99f132178cab70000355377183a4e18274f463a2caffe195292f5449d5729623243a490856a6e961a731e8dc9bf4f76585cb8a194296b1d4687bdfb39c516e273dd6b86bf03362a5716bd74d262be54d476d576871a05d7af6514be230c62664bcb3bc13a5dce55c0c3c7a2a6378cf98735662d3d0cb7796a9dce19d244fc809036ce13f468e02f3952b958c74a6d8abd65abd9", 0xc1, 0x400}, {&(0x7f00000001c0)="4601e1fa2eece03c1d98c7148b5cb8d5a6d4b441df5843", 0x17, 0x3}], 0x20, &(0x7f0000000380)={[{@map_normal}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}) fallocate(r4, 0x0, 0xa15, 0xbe9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2790.663212] loop1: detected capacity change from 0 to 40 [ 2790.669345] loop3: detected capacity change from 0 to 40 [ 2790.698598] loop6: detected capacity change from 0 to 40 [ 2790.701990] syz-executor.1: attempt to access beyond end of device [ 2790.701990] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2790.702626] loop5: detected capacity change from 0 to 40 [ 2790.705406] loop7: detected capacity change from 0 to 40 [ 2790.713338] syz-executor.2: attempt to access beyond end of device [ 2790.713338] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2790.714218] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2790.717521] FAT-fs (loop6): invalid media value (0x00) [ 2790.718395] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2790.723543] FAT-fs (loop7): bogus number of FAT sectors [ 2790.724459] FAT-fs (loop7): Can't find a valid FAT filesystem 22:25:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) 22:25:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4042, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x3) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) open$dir(&(0x7f0000000040)='./file1\x00', 0x2, 0x80) 22:25:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:25:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x44b43, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)) sendfile(0xffffffffffffffff, r3, &(0x7f0000000180)=0xfffffffffffffffd, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x140, 0x8}, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 22:25:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 2790.846889] loop4: detected capacity change from 0 to 40 [ 2790.852083] loop1: detected capacity change from 0 to 40 [ 2790.906104] loop2: detected capacity change from 0 to 40 [ 2790.952423] loop3: detected capacity change from 0 to 40 [ 2790.965243] syz-executor.2: attempt to access beyond end of device [ 2790.965243] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2790.975289] loop5: detected capacity change from 0 to 40 22:25:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x675) [ 2791.034074] syz-executor.2: attempt to access beyond end of device [ 2791.034074] loop2: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 2791.034954] Buffer I/O error on dev loop2, logical block 11, lost async page write [ 2791.042610] syz-executor.2: attempt to access beyond end of device [ 2791.042610] loop2: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 2791.048635] syz-executor.2: attempt to access beyond end of device [ 2791.048635] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 22:26:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:26:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 22:26:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000180)='./file0\x00', 0x101800, 0x102) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) mkdirat(r3, &(0x7f00000001c0)='./file1/file0\x00', 0x121) sendfile(r2, r1, 0x0, 0xfffffdef) 22:26:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x44b43, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)) sendfile(0xffffffffffffffff, r3, &(0x7f0000000180)=0xfffffffffffffffd, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x140, 0x8}, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 22:26:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2805.100019] loop5: detected capacity change from 0 to 40 [ 2805.101131] loop4: detected capacity change from 0 to 40 [ 2805.103164] loop6: detected capacity change from 0 to 40 [ 2805.108823] loop7: detected capacity change from 0 to 40 [ 2805.110549] FAT-fs (loop6): invalid media value (0x00) [ 2805.110985] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2805.128482] loop1: detected capacity change from 0 to 40 [ 2805.135102] FAT-fs (loop7): bogus number of FAT sectors [ 2805.136239] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2805.144429] loop3: detected capacity change from 0 to 40 [ 2805.146269] loop2: detected capacity change from 0 to 40 [ 2805.155413] syz-executor.5: attempt to access beyond end of device [ 2805.155413] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2805.156415] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2805.157129] syz-executor.5: attempt to access beyond end of device [ 2805.157129] loop5: rw=2049, sector=44, nr_sectors = 8 limit=40 22:26:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 2805.320381] loop5: detected capacity change from 0 to 40 [ 2805.324678] syz-executor.2: attempt to access beyond end of device [ 2805.324678] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2805.326624] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:26:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2805.398227] syz-executor.5: attempt to access beyond end of device [ 2805.398227] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2805.400101] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2805.428854] syz-executor.5: attempt to access beyond end of device [ 2805.428854] loop5: rw=2049, sector=44, nr_sectors = 8 limit=40 22:26:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x44b43, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000340)) sendfile(0xffffffffffffffff, r3, &(0x7f0000000180)=0xfffffffffffffffd, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x0, 0x140, 0x8}, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) 22:26:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x408000, 0xd1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4042, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/172, 0xac, 0x1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8000, 0xe) openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2805.624014] loop1: detected capacity change from 0 to 40 22:26:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x675) [ 2805.724485] loop4: detected capacity change from 0 to 40 [ 2805.835151] loop5: detected capacity change from 0 to 40 [ 2805.858574] loop0: detected capacity change from 0 to 40 22:26:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2805.913576] loop2: detected capacity change from 0 to 40 [ 2806.053744] syz-executor.5: attempt to access beyond end of device [ 2806.053744] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2806.055454] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2806.073303] syz-executor.5: attempt to access beyond end of device [ 2806.073303] loop5: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2806.093874] syz-executor.2: attempt to access beyond end of device [ 2806.093874] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2806.095585] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2806.144434] loop1: detected capacity change from 0 to 40 22:26:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2806.166986] syz-executor.2: attempt to access beyond end of device [ 2806.166986] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2806.168625] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:26:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:04 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) r7 = accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) r9 = socket$inet(0x2, 0x0, 0x9) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)={0x5, 0x2, 0x5, 0x0, 0x0, [{{r7}}, {{r0}, 0x8001}, {{r0}, 0x7fffffff}, {{r8}, 0x4}, {{r9}, 0x6}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r2, r5, r5, r6], 0x5) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2806.216203] loop6: detected capacity change from 0 to 40 [ 2806.237064] FAT-fs (loop6): invalid media value (0x00) [ 2806.237828] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2806.270606] loop0: detected capacity change from 0 to 40 [ 2806.351200] loop7: detected capacity change from 0 to 40 [ 2806.390923] loop3: detected capacity change from 0 to 40 [ 2806.395652] FAT-fs (loop7): bogus number of FAT sectors [ 2806.396801] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2806.419631] syz-executor.0: attempt to access beyond end of device [ 2806.419631] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2806.483830] Buffer I/O error on dev loop0, logical block 10, async page read [ 2806.485148] Buffer I/O error on dev loop0, logical block 10, async page read [ 2806.488153] Buffer I/O error on dev loop0, logical block 10, async page read [ 2823.132339] loop0: detected capacity change from 0 to 40 22:26:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:26:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:21 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) r7 = accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) r9 = socket$inet(0x2, 0x0, 0x9) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)={0x5, 0x2, 0x5, 0x0, 0x0, [{{r7}}, {{r0}, 0x8001}, {{r0}, 0x7fffffff}, {{r8}, 0x4}, {{r9}, 0x6}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r2, r5, r5, r6], 0x5) sendfile(r3, r2, 0x0, 0xfffffdef) 22:26:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:21 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x260082, 0xc4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2823.147801] loop5: detected capacity change from 0 to 40 22:26:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2823.149553] loop4: detected capacity change from 0 to 40 [ 2823.153819] loop1: detected capacity change from 0 to 40 [ 2823.156797] FAT-fs (loop4): bogus number of FAT sectors [ 2823.157172] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2823.160565] loop2: detected capacity change from 0 to 40 [ 2823.170940] loop7: detected capacity change from 0 to 40 [ 2823.194558] loop6: detected capacity change from 0 to 40 [ 2823.203586] bio_check_eod: 3 callbacks suppressed [ 2823.203599] syz-executor.0: attempt to access beyond end of device [ 2823.203599] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2823.204533] syz-executor.5: attempt to access beyond end of device [ 2823.204533] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2823.206974] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2823.226147] FAT-fs (loop6): invalid media value (0x00) [ 2823.227299] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2823.283824] syz-executor.0: attempt to access beyond end of device [ 2823.283824] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2823.284703] Buffer I/O error on dev loop0, logical block 10, async page read [ 2823.285607] syz-executor.0: attempt to access beyond end of device [ 2823.285607] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2823.286613] Buffer I/O error on dev loop0, logical block 10, async page read [ 2823.289454] syz-executor.0: attempt to access beyond end of device [ 2823.289454] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2823.290373] Buffer I/O error on dev loop0, logical block 10, async page read 22:26:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2823.329085] syz-executor.2: attempt to access beyond end of device [ 2823.329085] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 22:26:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2823.485889] loop5: detected capacity change from 0 to 40 [ 2823.487310] loop1: detected capacity change from 0 to 40 [ 2823.585633] syz-executor.5: attempt to access beyond end of device [ 2823.585633] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2823.587341] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2837.983774] loop7: detected capacity change from 0 to 40 [ 2837.991427] loop5: detected capacity change from 0 to 40 [ 2837.993293] loop4: detected capacity change from 0 to 40 [ 2837.996977] FAT-fs (loop4): bogus number of FAT sectors [ 2837.997367] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2838.009606] loop1: detected capacity change from 0 to 40 [ 2838.016007] syz-executor.5: attempt to access beyond end of device [ 2838.016007] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2838.016883] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:26:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:26:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:35 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) r7 = accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) r9 = socket$inet(0x2, 0x0, 0x9) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)={0x5, 0x2, 0x5, 0x0, 0x0, [{{r7}}, {{r0}, 0x8001}, {{r0}, 0x7fffffff}, {{r8}, 0x4}, {{r9}, 0x6}]}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r2, r5, r5, r6], 0x5) sendfile(r3, r2, 0x0, 0xfffffdef) 22:26:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:35 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.035377] loop6: detected capacity change from 0 to 40 [ 2838.044995] loop0: detected capacity change from 0 to 40 [ 2838.073083] FAT-fs (loop6): invalid media value (0x00) [ 2838.074099] FAT-fs (loop6): Can't find a valid FAT filesystem 22:26:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.114501] FAT-fs (loop2): bogus number of reserved sectors [ 2838.115443] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2838.153036] loop5: detected capacity change from 0 to 40 [ 2838.212269] syz-executor.0: attempt to access beyond end of device 22:26:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.212269] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2838.296507] syz-executor.5: attempt to access beyond end of device [ 2838.296507] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2838.298298] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2838.313294] syz-executor.0: attempt to access beyond end of device [ 2838.313294] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2838.314923] Buffer I/O error on dev loop0, logical block 10, async page read [ 2838.340375] syz-executor.0: attempt to access beyond end of device [ 2838.340375] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2838.342337] Buffer I/O error on dev loop0, logical block 10, async page read [ 2838.349202] syz-executor.5: attempt to access beyond end of device [ 2838.349202] loop5: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 2838.386652] syz-executor.0: attempt to access beyond end of device [ 2838.386652] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2838.389175] Buffer I/O error on dev loop0, logical block 10, async page read 22:26:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2838.446669] loop6: detected capacity change from 0 to 40 [ 2838.463532] FAT-fs (loop6): invalid media value (0x00) [ 2838.463945] FAT-fs (loop6): Can't find a valid FAT filesystem 22:26:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.616145] loop6: detected capacity change from 0 to 40 [ 2838.621257] FAT-fs (loop6): invalid media value (0x00) [ 2838.621681] FAT-fs (loop6): Can't find a valid FAT filesystem 22:26:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2838.730134] loop1: detected capacity change from 0 to 40 [ 2838.742025] loop5: detected capacity change from 0 to 40 [ 2838.870581] syz-executor.5: attempt to access beyond end of device [ 2838.870581] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2838.872161] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2838.891923] syz-executor.5: attempt to access beyond end of device [ 2838.891923] loop5: rw=2049, sector=44, nr_sectors = 4 limit=40 22:26:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.923250] loop4: detected capacity change from 0 to 40 [ 2838.925173] FAT-fs (loop4): bogus number of FAT sectors [ 2838.925545] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2838.936935] loop6: detected capacity change from 0 to 40 [ 2838.941106] FAT-fs (loop6): invalid media value (0x00) [ 2838.941570] FAT-fs (loop6): Can't find a valid FAT filesystem 22:26:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:37 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) r7 = accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) r9 = socket$inet(0x2, 0x0, 0x9) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)={0x5, 0x2, 0x5, 0x0, 0x0, [{{r7}}, {{r0}, 0x8001}, {{r0}, 0x7fffffff}, {{r8}, 0x4}, {{r9}, 0x6}]}) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2839.032096] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 2839.175701] loop5: detected capacity change from 0 to 40 [ 2839.191287] loop0: detected capacity change from 0 to 40 [ 2839.226885] syz-executor.5: attempt to access beyond end of device [ 2839.226885] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2839.228613] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2839.308274] Buffer I/O error on dev loop0, logical block 10, async page read [ 2839.308933] Buffer I/O error on dev loop0, logical block 10, async page read [ 2839.310598] Buffer I/O error on dev loop0, logical block 10, async page read 22:26:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:52 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) socket$inet(0x2, 0x0, 0x9) sendfile(r3, r2, 0x0, 0xfffffdef) 22:26:52 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x10, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat(r0, &(0x7f0000000080)='./file2\x00', 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) 22:26:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:26:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:26:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2854.432811] loop4: detected capacity change from 0 to 40 [ 2854.433502] loop6: detected capacity change from 0 to 40 [ 2854.436136] loop0: detected capacity change from 0 to 40 [ 2854.439696] loop1: detected capacity change from 0 to 40 [ 2854.440502] loop7: detected capacity change from 0 to 40 [ 2854.445528] FAT-fs (loop6): invalid media value (0x00) [ 2854.446138] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2854.458471] FAT-fs (loop4): bogus number of FAT sectors [ 2854.459350] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2854.482504] loop5: detected capacity change from 0 to 40 [ 2854.504435] loop2: detected capacity change from 0 to 40 [ 2854.511212] bio_check_eod: 5 callbacks suppressed [ 2854.511227] syz-executor.0: attempt to access beyond end of device [ 2854.511227] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 22:26:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, 0x0, 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2854.574323] syz-executor.0: attempt to access beyond end of device [ 2854.574323] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2854.576308] Buffer I/O error on dev loop0, logical block 10, async page read [ 2854.577870] syz-executor.0: attempt to access beyond end of device [ 2854.577870] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2854.579684] Buffer I/O error on dev loop0, logical block 10, async page read [ 2854.615297] syz-executor.0: attempt to access beyond end of device [ 2854.615297] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2854.617399] Buffer I/O error on dev loop0, logical block 10, async page read 22:26:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2854.720340] syz-executor.2: attempt to access beyond end of device [ 2854.720340] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2854.722320] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2854.772285] loop1: detected capacity change from 0 to 40 22:26:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:26:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r4}, 0x18, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x9, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="9b1718bf375a02c830413459eda7847353", 0x11, 0x1}, {&(0x7f0000000240)="492db31878aa4c10980a9860312f3db200214917acfd5583d482807addd4f1bc08080db1466e880197f5fa98d71035cf1fa12b568e04911a8199be5136b86e43a5307a82c77f499e9e0f230cdd43582710dc1fc7bae1a54cb9d6c504d05ea15eef3ca2228db26bacf936efe71e833f21bf4883e2afb6b9d60ef042da4138e17ec7dcb78d0a2c17d1b40a33ae59cccfc6471e6b6423ebdb45641c86a8912599091d90d33589a4da593aa0", 0xaa, 0x8525}], 0xa00044, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '&^^#-/'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@appraise}, {@fowner_lt={'fowner<', r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@fsmagic}]}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2854.960372] loop6: detected capacity change from 0 to 40 [ 2854.972776] FAT-fs (loop6): invalid media value (0x00) [ 2854.973166] FAT-fs (loop6): Can't find a valid FAT filesystem 22:26:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:26:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x20002) sendfile(r3, r2, 0x0, 0xfffffdef) 22:26:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, 0x0, 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2855.088667] loop2: detected capacity change from 0 to 40 [ 2855.128134] loop5: detected capacity change from 0 to 40 [ 2855.206087] loop1: detected capacity change from 0 to 40 22:26:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2855.225945] loop6: detected capacity change from 0 to 40 [ 2855.242915] FAT-fs (loop6): invalid media value (0x00) [ 2855.243392] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2855.247187] loop0: detected capacity change from 0 to 40 [ 2855.281992] syz-executor.2: attempt to access beyond end of device [ 2855.281992] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2855.283854] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2855.381560] loop5: detected capacity change from 0 to 40 [ 2855.388427] syz-executor.0: attempt to access beyond end of device [ 2855.388427] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2855.403834] syz-executor.0: attempt to access beyond end of device [ 2855.403834] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2855.405658] Buffer I/O error on dev loop0, logical block 10, async page read [ 2855.414847] syz-executor.0: attempt to access beyond end of device [ 2855.414847] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2855.416821] Buffer I/O error on dev loop0, logical block 10, async page read [ 2855.424134] syz-executor.0: attempt to access beyond end of device [ 2855.424134] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2855.425811] Buffer I/O error on dev loop0, logical block 10, async page read 22:27:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, 0x0, 0x820) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:27:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2868.231942] loop4: detected capacity change from 0 to 40 [ 2868.239625] loop7: detected capacity change from 0 to 40 [ 2868.244939] loop5: detected capacity change from 0 to 40 [ 2868.246369] loop2: detected capacity change from 0 to 40 22:27:06 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:27:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4143, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x161) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x400000000, 0x40000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0xff, 0x0, 0x0, 0x0, 0x20, 0x86625, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext={0x9078, 0x2}, 0x40002, 0x9, 0x8, 0x5, 0x6, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x8000}, r4, 0x1, r5, 0xa) sendfile(r2, r3, 0x0, 0x7fffffff) acct(&(0x7f00000001c0)='./file0\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) accept4(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80, 0x7518d48f359bac2c) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2868.251188] loop0: detected capacity change from 0 to 40 [ 2868.251579] loop3: detected capacity change from 0 to 40 [ 2868.256140] FAT-fs (loop4): bogus number of FAT sectors [ 2868.256994] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2868.274176] loop6: detected capacity change from 0 to 40 [ 2868.284380] loop1: detected capacity change from 0 to 40 [ 2868.293869] FAT-fs (loop6): invalid media value (0x00) [ 2868.294686] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2868.315579] syz-executor.2: attempt to access beyond end of device [ 2868.315579] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2868.316531] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2868.343156] Process accounting resumed [ 2868.361664] syz-executor.0: attempt to access beyond end of device [ 2868.361664] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.385996] syz-executor.0: attempt to access beyond end of device [ 2868.385996] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.387807] Buffer I/O error on dev loop0, logical block 10, async page read [ 2868.409398] syz-executor.0: attempt to access beyond end of device [ 2868.409398] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.410996] Buffer I/O error on dev loop0, logical block 10, async page read 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2868.436837] syz-executor.0: attempt to access beyond end of device [ 2868.436837] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.438443] Buffer I/O error on dev loop0, logical block 10, async page read 22:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:27:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2868.549182] loop5: detected capacity change from 0 to 40 [ 2868.578206] loop6: detected capacity change from 0 to 40 [ 2868.580399] Process accounting resumed 22:27:06 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0x820) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x30f, 0xffffffff}) sendfile(r3, r2, 0x0, 0xfffffdef) 22:27:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) sendfile(r0, r4, 0x0, 0x495) [ 2868.610539] kworker/u4:9: attempt to access beyond end of device [ 2868.610539] loop2: rw=1, sector=44, nr_sectors = 4 limit=40 [ 2868.638938] FAT-fs (loop6): invalid media value (0x00) [ 2868.639820] FAT-fs (loop6): Can't find a valid FAT filesystem 22:27:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2868.740783] loop1: detected capacity change from 0 to 40 [ 2868.759661] loop6: detected capacity change from 0 to 40 [ 2868.764454] loop0: detected capacity change from 0 to 40 [ 2868.768058] FAT-fs (loop6): invalid media value (0x00) [ 2868.768463] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2868.832529] syz-executor.0: attempt to access beyond end of device [ 2868.832529] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.842863] syz-executor.0: attempt to access beyond end of device [ 2868.842863] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.843849] Buffer I/O error on dev loop0, logical block 10, async page read [ 2868.845466] syz-executor.0: attempt to access beyond end of device [ 2868.845466] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.846459] Buffer I/O error on dev loop0, logical block 10, async page read [ 2868.859631] syz-executor.0: attempt to access beyond end of device [ 2868.859631] loop0: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2868.860508] Buffer I/O error on dev loop0, logical block 10, async page read [ 2868.905946] loop2: detected capacity change from 0 to 40 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:27:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_io_uring_complete(0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2869.121123] loop5: detected capacity change from 0 to 40 22:27:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:27:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2869.208297] loop0: detected capacity change from 0 to 40 [ 2869.303219] loop1: detected capacity change from 0 to 40 [ 2869.330632] Buffer I/O error on dev loop0, logical block 10, async page read [ 2869.332096] Buffer I/O error on dev loop0, logical block 10, async page read [ 2869.337502] Buffer I/O error on dev loop0, logical block 10, async page read [ 2869.339288] loop4: detected capacity change from 0 to 40 [ 2869.365133] FAT-fs (loop4): bogus number of FAT sectors [ 2869.365974] FAT-fs (loop4): Can't find a valid FAT filesystem 22:27:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_io_uring_complete(0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 22:27:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) 22:27:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="74ea51a73d11e0fa72", @ANYRES64], 0x820) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2884.254625] loop5: detected capacity change from 0 to 40 [ 2884.260481] loop2: detected capacity change from 0 to 40 [ 2884.261217] loop7: detected capacity change from 0 to 40 [ 2884.265357] loop0: detected capacity change from 0 to 40 [ 2884.266239] loop1: detected capacity change from 0 to 40 [ 2884.268400] loop3: detected capacity change from 0 to 40 [ 2884.275552] loop4: detected capacity change from 0 to 40 [ 2884.298212] FAT-fs (loop4): bogus number of FAT sectors [ 2884.299041] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2884.333032] bio_check_eod: 6 callbacks suppressed [ 2884.333055] syz-executor.1: attempt to access beyond end of device [ 2884.333055] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 22:27:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2884.422950] syz-executor.0: attempt to access beyond end of device [ 2884.422950] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2884.424904] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2884.468276] syz-executor.2: attempt to access beyond end of device [ 2884.468276] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2884.469964] Buffer I/O error on dev loop2, logical block 10, lost async page write 22:27:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_io_uring_complete(0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0xe0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x820) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2884.735194] loop4: detected capacity change from 0 to 40 [ 2884.743337] loop1: detected capacity change from 0 to 40 [ 2884.772527] FAT-fs (loop4): bogus number of FAT sectors [ 2884.773320] FAT-fs (loop4): Can't find a valid FAT filesystem 22:27:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f0000000040)='./file2\x00', 0x82) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2884.901850] syz-executor.1: attempt to access beyond end of device [ 2884.901850] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2884.970446] loop0: detected capacity change from 0 to 40 [ 2884.984666] loop2: detected capacity change from 0 to 40 22:27:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x820) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) [ 2885.111952] syz-executor.0: attempt to access beyond end of device [ 2885.111952] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2885.113525] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2885.119620] syz-executor.2: attempt to access beyond end of device [ 2885.119620] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2885.121287] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2885.186302] loop4: detected capacity change from 0 to 40 [ 2885.219080] FAT-fs (loop4): bogus number of FAT sectors [ 2885.219937] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2885.225072] loop1: detected capacity change from 0 to 40 [ 2885.296374] syz-executor.1: attempt to access beyond end of device [ 2885.296374] loop1: rw=0, sector=40, nr_sectors = 4 limit=40 [ 2885.801092] ================================================================== [ 2885.802032] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 2885.802821] Read of size 8 at addr ffff888043c96f48 by task syz-executor/13919 [ 2885.803683] [ 2885.803898] CPU: 1 PID: 13919 Comm: syz-executor Not tainted 6.1.0-rc7-next-20221205 #1 [ 2885.804829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2885.805783] Call Trace: [ 2885.806097] [ 2885.806374] dump_stack_lvl+0x8f/0xb7 [ 2885.806861] print_report+0x175/0x478 [ 2885.807346] ? __lock_acquire+0x42c9/0x5e70 [ 2885.807866] kasan_report+0xbf/0x1c0 [ 2885.808336] ? __lock_acquire+0x42c9/0x5e70 [ 2885.808856] __lock_acquire+0x42c9/0x5e70 [ 2885.809374] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2885.809935] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2885.810554] ? __pfx___lock_acquire+0x10/0x10 [ 2885.811102] ? __switch_to+0x5c3/0xee0 [ 2885.811595] lock_acquire+0x1a6/0x530 [ 2885.812068] ? kmemleak_scan+0x1a0/0x1600 [ 2885.812573] ? __pfx_lock_acquire+0x10/0x10 [ 2885.813089] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 2885.813735] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 2885.814374] ? lockdep_hardirqs_on+0x7d/0x100 [ 2885.814907] ? _raw_spin_lock_irq+0x45/0x50 [ 2885.815741] _raw_spin_lock_irq+0x36/0x50 [ 2885.819932] ? kmemleak_scan+0x1a0/0x1600 [ 2885.820449] kmemleak_scan+0x1a0/0x1600 [ 2885.820930] ? __pfx_kmemleak_scan+0x10/0x10 [ 2885.821478] ? strncpy_from_user+0x107/0x500 [ 2885.822014] kmemleak_write+0x574/0x680 [ 2885.822501] ? __pfx_kmemleak_write+0x10/0x10 [ 2885.823075] ? debugfs_file_get+0x1d2/0x450 [ 2885.823597] ? __pfx_debugfs_file_get+0x10/0x10 [ 2885.824164] full_proxy_write+0x121/0x190 [ 2885.824666] vfs_write+0x358/0xe40 [ 2885.825108] ? __pfx_full_proxy_write+0x10/0x10 [ 2885.825667] ? __pfx_vfs_write+0x10/0x10 [ 2885.826166] ? lock_release+0x3b6/0x750 [ 2885.826652] ? __up_read+0x192/0x730 [ 2885.827340] ? handle_mm_fault+0x43d/0xae0 [ 2885.828042] ? __pfx___up_read+0x10/0x10 [ 2885.828724] ? __fget_light+0x212/0x280 [ 2885.829368] ksys_write+0x12b/0x260 [ 2885.829969] ? __pfx_ksys_write+0x10/0x10 [ 2885.830657] ? syscall_enter_from_user_mode+0x21/0x50 [ 2885.831542] ? syscall_enter_from_user_mode+0x21/0x50 [ 2885.832386] do_syscall_64+0x3f/0x90 [ 2885.833028] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2885.833820] RIP: 0033:0x7f56c28235c3 [ 2885.834416] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 2885.837216] RSP: 002b:00007ffe2e2da368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2885.838377] RAX: ffffffffffffffda RBX: 00007ffe2e2da9a8 RCX: 00007f56c28235c3 [ 2885.839503] RDX: 0000000000000004 RSI: 00007f56c28d9ed9 RDI: 0000000000000003 [ 2885.840619] RBP: 0000000000000002 R08: 0000000000000b45 R09: 00007ffe2e3ad080 [ 2885.841697] R10: 00007ffe2e3ad090 R11: 0000000000000246 R12: 00000000fffffff6 [ 2885.842803] R13: 00007ffe2e2dbef1 R14: 0000000000000000 R15: 00000000002c0667 [ 2885.843973] [ 2885.844268] [ 2885.844488] Allocated by task 13922: [ 2885.844943] kasan_save_stack+0x22/0x50 [ 2885.845447] kasan_set_track+0x25/0x30 [ 2885.845934] __kasan_slab_alloc+0x5c/0x70 [ 2885.846473] kmem_cache_alloc+0x1e1/0x410 [ 2885.847000] __create_object+0x3d/0xc10 [ 2885.847528] kmem_cache_alloc+0x273/0x410 [ 2885.848049] __alloc_file+0x21/0x240 [ 2885.848529] alloc_empty_file+0x71/0x170 [ 2885.849057] path_openat+0xd4/0x29b0 [ 2885.849529] do_filp_open+0x1ba/0x410 [ 2885.850011] do_sys_openat2+0x171/0x4c0 [ 2885.850523] __x64_sys_openat+0x143/0x200 [ 2885.851072] do_syscall_64+0x3f/0x90 [ 2885.851569] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2885.852230] [ 2885.852452] Freed by task 13: [ 2885.852850] kasan_save_stack+0x22/0x50 [ 2885.853361] kasan_set_track+0x25/0x30 [ 2885.853853] kasan_save_free_info+0x2e/0x50 [ 2885.854401] __kasan_slab_free+0x10a/0x190 [ 2885.854951] kmem_cache_free+0xfb/0x610 [ 2885.855489] rcu_core+0x7e2/0x2090 [ 2885.855950] __do_softirq+0x1c7/0x8f9 [ 2885.856443] [ 2885.856665] Last potentially related work creation: [ 2885.857281] kasan_save_stack+0x22/0x50 [ 2885.857779] __kasan_record_aux_stack+0x95/0xb0 [ 2885.858381] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2885.859053] kmem_cache_free+0xc1/0x610 [ 2885.859555] rcu_core+0x7e2/0x2090 [ 2885.860014] __do_softirq+0x1c7/0x8f9 [ 2885.860511] [ 2885.860737] Second to last potentially related work creation: [ 2885.861434] kasan_save_stack+0x22/0x50 [ 2885.861933] __kasan_record_aux_stack+0x95/0xb0 [ 2885.862551] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2885.863240] kmem_cache_free+0xc1/0x610 [ 2885.863758] exit_mmap+0x253/0x680 [ 2885.864226] mmput+0xd5/0x390 [ 2885.864657] do_exit+0x99b/0x2720 [ 2885.865118] do_group_exit+0xd4/0x2a0 [ 2885.865597] __x64_sys_exit_group+0x3e/0x50 [ 2885.866142] do_syscall_64+0x3f/0x90 [ 2885.866639] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2885.867313] [ 2885.867537] The buggy address belongs to the object at ffff888043c96f30 [ 2885.867537] which belongs to the cache kmemleak_object of size 368 [ 2885.869102] The buggy address is located 24 bytes inside of [ 2885.869102] 368-byte region [ffff888043c96f30, ffff888043c970a0) [ 2885.870492] [ 2885.870723] The buggy address belongs to the physical page: [ 2885.871432] page:000000000dda1225 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43c96 [ 2885.872585] head:000000000dda1225 order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 2885.873938] anon flags: 0x100000000010200(slab|head|node=0|zone=1) [ 2885.874728] raw: 0100000000010200 ffff88800844f780 ffffea000061fb80 dead000000000003 [ 2885.875709] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 2885.876644] page dumped because: kasan: bad access detected [ 2885.877334] [ 2885.877558] Memory state around the buggy address: [ 2885.878168] ffff888043c96e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2885.879080] ffff888043c96e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 2885.879939] >ffff888043c96f00: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 2885.880843] ^ [ 2885.881556] ffff888043c96f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2885.882463] ffff888043c97000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2885.883368] ================================================================== [ 2885.884273] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 22:27:23 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=1ffff1100308cede RDX=1ffff1100308cedc RSI=ffff8880184679f0 RDI=ffff8880184679f0 RBP=ffff8880184676f0 RSP=ffff888018467618 R8 =ffffffff860ed69c R9 =ffffffff860ed6a0 R10=ffffed100308cee0 R11=ffff8880184676d8 R12=ffff8880184676d9 R13=ffff8880184676f8 R14=ffff888018467698 R15=ffffffff860ed6a1 RIP=ffffffff8112d5c6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f122195a8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe47a0e51000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe47a0e4f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005567b92f9378 CR3=000000001de98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=005567b87aceec00007fff00303a3762 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00 XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000 XMM08=005567b87aceec00007fff00303a3762 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82486075 RDI=ffffffff87fb4b60 RBP=ffffffff87fb4b20 RSP=ffff888046cf71e8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87fb4b20 R14=0000000000000010 R15=ffffffff82486060 RIP=ffffffff824860cd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555661c400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3a8301e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3a8301c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1221d72ae0 CR3=00000000165f0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000ffff00000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=534741540031333735343436323d4445 XMM05=3d524f4e494d00373d524f4a414d0037 XMM06=534b534944006b7369643d4550595456 XMM07=414e564544006b636f6c623d4d455453 XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000