ffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 13:34:56 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0x2, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:34:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 13:34:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 8) 13:34:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) [ 2377.770348] loop6: detected capacity change from 0 to 40 [ 2377.772887] loop5: detected capacity change from 0 to 40 [ 2377.782225] FAULT_INJECTION: forcing a failure. [ 2377.782225] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.783667] CPU: 0 PID: 13177 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2377.784391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.785144] Call Trace: [ 2377.785384] [ 2377.785594] dump_stack_lvl+0x8f/0xb7 [ 2377.785951] should_fail_ex.cold+0x5/0xa [ 2377.786333] should_failslab+0x9/0x20 [ 2377.786697] kmem_cache_alloc_lru+0x6b/0x760 [ 2377.787102] ? __d_alloc+0x31/0x9c0 [ 2377.787459] __d_alloc+0x31/0x9c0 [ 2377.787790] ? get_random_u32+0x406/0x6e0 [ 2377.788179] d_alloc_pseudo+0x1d/0x70 [ 2377.788533] alloc_file_pseudo+0xd2/0x260 [ 2377.788921] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2377.789359] ? shmem_get_inode+0x6b2/0xdb0 [ 2377.789771] __shmem_file_setup+0x144/0x320 [ 2377.790172] __do_sys_memfd_create+0x1ca/0x4e0 [ 2377.790613] do_syscall_64+0x3f/0x90 [ 2377.790959] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2377.791428] RIP: 0033:0x7f85cf83db19 [ 2377.791767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.793337] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2377.794013] RAX: ffffffffffffffda RBX: 0000000020001f00 RCX: 00007f85cf83db19 [ 2377.794635] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f85cf8970fb [ 2377.795265] RBP: 0000000000000002 R08: 0000000000010000 R09: 0000000000000000 [ 2377.795897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 2377.796692] R13: 00007ffe7db8d8af R14: 0000000000020000 R15: 0000000000022000 [ 2377.797759] [ 2377.809636] loop0: detected capacity change from 0 to 40 [ 2377.811353] loop4: detected capacity change from 0 to 40 [ 2377.830877] loop7: detected capacity change from 0 to 40 [ 2377.999841] syz-executor.4: attempt to access beyond end of device [ 2377.999841] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.001956] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:34:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 9) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2378.065951] syz-executor.5: attempt to access beyond end of device [ 2378.065951] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.068081] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2378.155855] syz-executor.7: attempt to access beyond end of device [ 2378.155855] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.157740] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:34:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:34:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) [ 2378.235426] syz-executor.6: attempt to access beyond end of device [ 2378.235426] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.237854] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:34:56 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:34:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 9) [ 2378.303847] syz-executor.0: attempt to access beyond end of device [ 2378.303847] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.305828] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2378.340967] loop5: detected capacity change from 0 to 40 [ 2378.342176] loop2: detected capacity change from 0 to 256 13:34:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) [ 2378.509236] loop4: detected capacity change from 0 to 40 [ 2378.521933] loop7: detected capacity change from 0 to 40 13:34:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 13:34:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:34:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2378.710046] syz-executor.4: attempt to access beyond end of device [ 2378.710046] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.711720] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2378.727633] loop6: detected capacity change from 0 to 40 [ 2378.750946] syz-executor.5: attempt to access beyond end of device [ 2378.750946] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.752801] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2378.770620] loop0: detected capacity change from 0 to 40 [ 2378.776954] FAULT_INJECTION: forcing a failure. [ 2378.776954] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.778779] CPU: 1 PID: 13204 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2378.779724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.780662] Call Trace: [ 2378.780993] [ 2378.781280] dump_stack_lvl+0x8f/0xb7 [ 2378.781766] should_fail_ex.cold+0x5/0xa [ 2378.782272] ? __alloc_file+0x21/0x240 [ 2378.782747] should_failslab+0x9/0x20 [ 2378.783217] kmem_cache_alloc+0x5a/0x410 [ 2378.783739] ? d_instantiate+0x79/0xa0 [ 2378.784242] __alloc_file+0x21/0x240 [ 2378.784715] alloc_empty_file+0x71/0x170 [ 2378.785223] alloc_file+0x59/0x800 [ 2378.785731] alloc_file_pseudo+0x16e/0x260 [ 2378.786250] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2378.786830] ? shmem_get_inode+0x6b2/0xdb0 [ 2378.787362] __shmem_file_setup+0x144/0x320 [ 2378.787880] __do_sys_memfd_create+0x1ca/0x4e0 [ 2378.788448] do_syscall_64+0x3f/0x90 [ 2378.788954] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2378.789621] RIP: 0033:0x7f85cf83db19 [ 2378.790108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.792334] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2378.793291] RAX: ffffffffffffffda RBX: 0000000020001f00 RCX: 00007f85cf83db19 [ 2378.794184] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f85cf8970fb [ 2378.795060] RBP: 0000000000000002 R08: 0000000000010000 R09: 0000000000000000 [ 2378.795952] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 2378.796842] R13: 00007ffe7db8d8af R14: 0000000000020000 R15: 0000000000022000 [ 2378.797754] [ 2378.963054] syz-executor.6: attempt to access beyond end of device [ 2378.963054] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.964707] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2378.987863] syz-executor.7: attempt to access beyond end of device [ 2378.987863] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2378.989876] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2379.089016] syz-executor.0: attempt to access beyond end of device [ 2379.089016] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2379.090779] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:35:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 13:35:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) 13:35:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 13:35:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:13 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 11) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2394.908566] loop0: detected capacity change from 0 to 40 13:35:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 10) [ 2394.914763] loop2: detected capacity change from 0 to 256 [ 2394.945175] loop6: detected capacity change from 0 to 40 [ 2394.971712] loop4: detected capacity change from 0 to 40 [ 2394.991224] loop7: detected capacity change from 0 to 40 13:35:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 12) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2395.110785] syz-executor.0: attempt to access beyond end of device [ 2395.110785] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.111967] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2395.163767] syz-executor.4: attempt to access beyond end of device [ 2395.163767] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.164802] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) [ 2395.233948] FAULT_INJECTION: forcing a failure. [ 2395.233948] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.235037] CPU: 0 PID: 13236 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2395.235597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.236162] Call Trace: [ 2395.236346] [ 2395.236514] dump_stack_lvl+0x8f/0xb7 [ 2395.236810] should_fail_ex.cold+0x5/0xa [ 2395.237123] ? security_file_alloc+0x38/0x170 [ 2395.237450] should_failslab+0x9/0x20 [ 2395.237740] kmem_cache_alloc+0x5a/0x410 [ 2395.238048] security_file_alloc+0x38/0x170 [ 2395.238355] __alloc_file+0xb6/0x240 [ 2395.238634] alloc_empty_file+0x71/0x170 [ 2395.238935] alloc_file+0x59/0x800 [ 2395.239200] alloc_file_pseudo+0x16e/0x260 [ 2395.239662] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2395.240012] ? shmem_get_inode+0x6b2/0xdb0 [ 2395.240324] __shmem_file_setup+0x144/0x320 [ 2395.240644] __do_sys_memfd_create+0x1ca/0x4e0 [ 2395.240996] do_syscall_64+0x3f/0x90 [ 2395.241284] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2395.241668] RIP: 0033:0x7f85cf83db19 [ 2395.241931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.243144] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2395.243674] RAX: ffffffffffffffda RBX: 0000000020001f00 RCX: 00007f85cf83db19 [ 2395.244148] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 00007f85cf8970fb [ 2395.244634] RBP: 0000000000000002 R08: 0000000000010000 R09: 0000000000000000 [ 2395.245128] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 2395.245604] R13: 00007ffe7db8d8af R14: 0000000000020000 R15: 0000000000022000 [ 2395.246093] [ 2395.291348] syz-executor.6: attempt to access beyond end of device [ 2395.291348] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.292705] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2395.302907] loop0: detected capacity change from 0 to 40 13:35:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) 13:35:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) [ 2395.401916] syz-executor.7: attempt to access beyond end of device [ 2395.401916] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.403758] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2395.461117] loop4: detected capacity change from 0 to 40 [ 2395.464232] syz-executor.0: attempt to access beyond end of device [ 2395.464232] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.465302] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2395.521356] loop6: detected capacity change from 0 to 40 [ 2395.608062] syz-executor.4: attempt to access beyond end of device [ 2395.608062] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.609230] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2395.762049] syz-executor.6: attempt to access beyond end of device [ 2395.762049] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2395.764023] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 11) 13:35:28 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:28 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) 13:35:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 13:35:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 13) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) [ 2409.815998] loop6: detected capacity change from 0 to 40 [ 2409.817075] loop7: detected capacity change from 0 to 40 [ 2409.831852] loop4: detected capacity change from 0 to 40 [ 2409.897719] syz-executor.4: attempt to access beyond end of device [ 2409.897719] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2409.898640] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2409.932780] loop0: detected capacity change from 0 to 40 [ 2409.933051] loop2: detected capacity change from 0 to 256 13:35:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) [ 2410.018995] syz-executor.6: attempt to access beyond end of device [ 2410.018995] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2410.021763] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2410.107269] loop4: detected capacity change from 0 to 40 [ 2410.110817] syz-executor.7: attempt to access beyond end of device [ 2410.110817] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2410.111827] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:35:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) 13:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 14) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:28 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x5, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2410.209209] loop6: detected capacity change from 0 to 40 [ 2410.213439] FAULT_INJECTION: forcing a failure. [ 2410.213439] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.214351] CPU: 1 PID: 13274 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.214889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.215424] Call Trace: [ 2410.215605] [ 2410.215766] dump_stack_lvl+0x8f/0xb7 [ 2410.216052] should_fail_ex.cold+0x5/0xa [ 2410.216357] should_failslab+0x9/0x20 [ 2410.216623] __kmem_cache_alloc_node+0x5b/0x400 [ 2410.216944] ? iter_file_splice_write+0x169/0xcb0 [ 2410.217283] ? iter_file_splice_write+0x169/0xcb0 [ 2410.217608] __kmalloc+0x46/0xc0 [ 2410.217854] iter_file_splice_write+0x169/0xcb0 [ 2410.218168] ? generic_file_read_iter+0x330/0x550 [ 2410.218506] ? generic_file_splice_read+0x1bc/0x4d0 [ 2410.218851] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.219222] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2410.219580] ? inode_security+0x105/0x140 [ 2410.219871] ? security_file_permission+0xb5/0xe0 [ 2410.220195] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.220545] direct_splice_actor+0x113/0x180 [ 2410.220841] splice_direct_to_actor+0x33a/0x8c0 [ 2410.221184] ? __pfx_direct_splice_actor+0x10/0x10 [ 2410.221518] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2410.221870] ? security_file_permission+0xb5/0xe0 [ 2410.222200] do_splice_direct+0x1bc/0x290 [ 2410.222478] ? __pfx_do_splice_direct+0x10/0x10 [ 2410.222797] ? lock_is_held_type+0xdb/0x130 [ 2410.223136] do_sendfile+0xb1d/0x1280 [ 2410.223421] ? __pfx_do_sendfile+0x10/0x10 [ 2410.223751] __x64_sys_sendfile64+0x248/0x2a0 [ 2410.224066] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2410.224429] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.224773] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.225152] do_syscall_64+0x3f/0x90 [ 2410.225434] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.225774] RIP: 0033:0x7faccd749b19 [ 2410.226022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.227149] RSP: 002b:00007faccacbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2410.227632] RAX: ffffffffffffffda RBX: 00007faccd85cf60 RCX: 00007faccd749b19 [ 2410.228086] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2410.228535] RBP: 00007faccacbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.228991] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2410.229459] R13: 00007fff615b2f1f R14: 00007faccacbf300 R15: 0000000000022000 [ 2410.229926] [ 2410.238218] syz-executor.0: attempt to access beyond end of device [ 2410.238218] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2410.239331] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2410.251166] FAULT_INJECTION: forcing a failure. [ 2410.251166] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2410.252361] CPU: 1 PID: 13280 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.252885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.253417] Call Trace: [ 2410.253591] [ 2410.253749] dump_stack_lvl+0x8f/0xb7 [ 2410.254016] should_fail_ex.cold+0x5/0xa [ 2410.254302] prepare_alloc_pages+0x178/0x500 [ 2410.254612] ? lock_is_held_type+0xdb/0x130 [ 2410.254917] __alloc_pages+0x149/0x500 [ 2410.255196] ? lock_release+0x3b6/0x750 [ 2410.255468] ? __pfx___alloc_pages+0x10/0x10 [ 2410.255765] ? __pfx_lock_release+0x10/0x10 [ 2410.256081] vma_alloc_folio+0xe2/0x480 [ 2410.256359] shmem_alloc_folio+0x108/0x1d0 [ 2410.256683] ? __pfx_shmem_alloc_folio+0x10/0x10 [ 2410.257028] ? percpu_counter_add_batch+0xb8/0x180 [ 2410.257416] ? __vm_enough_memory+0x188/0x390 [ 2410.257730] shmem_get_folio_gfp.constprop.0+0x6ed/0x1670 [ 2410.258145] ? current_time+0x79/0x2c0 [ 2410.258425] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 2410.258861] ? mark_held_locks+0x9e/0xe0 [ 2410.259155] shmem_write_begin+0x148/0x360 [ 2410.259481] ? __pfx_shmem_write_begin+0x10/0x10 [ 2410.259823] generic_perform_write+0x25a/0x580 [ 2410.260179] ? __pfx_generic_perform_write+0x10/0x10 [ 2410.260530] ? __pfx_file_update_time+0x10/0x10 [ 2410.260864] ? generic_write_checks+0x2c0/0x400 [ 2410.261241] __generic_file_write_iter+0x308/0x4b0 [ 2410.261598] generic_file_write_iter+0xe7/0x350 [ 2410.261972] vfs_write+0xa4f/0xe40 [ 2410.262237] ? __pfx_vfs_write+0x10/0x10 [ 2410.262588] __x64_sys_pwrite64+0x1ff/0x260 [ 2410.262892] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 2410.263243] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.263587] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.263944] do_syscall_64+0x3f/0x90 [ 2410.264206] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.264545] RIP: 0033:0x7f85cf7f0ab7 [ 2410.264800] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2410.264971] FAULT_INJECTION: forcing a failure. [ 2410.264971] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.265948] RSP: 002b:00007f85ccdb2e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2410.265986] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0ab7 [ 2410.265998] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000006 [ 2410.266010] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2410.266021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2410.266031] R13: 0000000000000006 R14: 0000000020001f00 R15: 0000000000000000 [ 2410.266059] [ 2410.275752] CPU: 0 PID: 13277 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.276747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.277748] Call Trace: [ 2410.278073] [ 2410.278371] dump_stack_lvl+0x8f/0xb7 [ 2410.278878] should_fail_ex.cold+0x5/0xa [ 2410.279418] should_failslab+0x9/0x20 [ 2410.279913] __kmem_cache_alloc_node+0x5b/0x400 [ 2410.280506] ? iter_file_splice_write+0x169/0xcb0 [ 2410.281130] ? iter_file_splice_write+0x169/0xcb0 [ 2410.281754] __kmalloc+0x46/0xc0 [ 2410.282206] iter_file_splice_write+0x169/0xcb0 [ 2410.282798] ? generic_file_read_iter+0x330/0x550 [ 2410.283429] ? generic_file_splice_read+0x1bc/0x4d0 [ 2410.284062] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.284704] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2410.285393] ? inode_security+0x105/0x140 [ 2410.285948] ? security_file_permission+0xb5/0xe0 [ 2410.286565] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.287243] direct_splice_actor+0x113/0x180 [ 2410.287813] splice_direct_to_actor+0x33a/0x8c0 [ 2410.288409] ? __pfx_direct_splice_actor+0x10/0x10 [ 2410.289047] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2410.289717] ? security_file_permission+0xb5/0xe0 [ 2410.290352] do_splice_direct+0x1bc/0x290 [ 2410.290893] ? __pfx_do_splice_direct+0x10/0x10 [ 2410.291513] ? lock_is_held_type+0xdb/0x130 [ 2410.292092] do_sendfile+0xb1d/0x1280 [ 2410.292619] ? __pfx_do_sendfile+0x10/0x10 [ 2410.293242] __x64_sys_sendfile64+0x248/0x2a0 [ 2410.293826] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2410.294459] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.295141] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.295804] do_syscall_64+0x3f/0x90 [ 2410.296302] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.296960] RIP: 0033:0x7fa87f995b19 [ 2410.297472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.299910] RSP: 002b:00007fa87cf0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2410.300832] RAX: ffffffffffffffda RBX: 00007fa87faa8f60 RCX: 00007fa87f995b19 [ 2410.301709] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2410.302609] RBP: 00007fa87cf0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.303472] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2410.304347] R13: 00007ffe323515df R14: 00007fa87cf0b300 R15: 0000000000022000 [ 2410.305241] [ 2410.306803] loop2: detected capacity change from 0 to 256 13:35:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 12) 13:35:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 13:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 15) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 13:35:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) [ 2410.488862] loop0: detected capacity change from 0 to 40 [ 2410.496107] loop7: detected capacity change from 0 to 40 [ 2410.535723] loop6: detected capacity change from 0 to 40 [ 2410.608267] FAULT_INJECTION: forcing a failure. [ 2410.608267] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.609764] CPU: 1 PID: 13289 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.610349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.610911] Call Trace: [ 2410.611101] [ 2410.611272] dump_stack_lvl+0x8f/0xb7 [ 2410.611568] should_fail_ex.cold+0x5/0xa [ 2410.611892] should_failslab+0x9/0x20 [ 2410.612219] __kmem_cache_alloc_node+0x5b/0x400 [ 2410.612729] ? iter_file_splice_write+0x169/0xcb0 [ 2410.613115] ? iter_file_splice_write+0x169/0xcb0 [ 2410.613484] __kmalloc+0x46/0xc0 [ 2410.613736] iter_file_splice_write+0x169/0xcb0 [ 2410.614079] ? generic_file_read_iter+0x330/0x550 [ 2410.614448] ? generic_file_splice_read+0x1bc/0x4d0 [ 2410.614784] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.615153] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2410.615549] ? inode_security+0x105/0x140 [ 2410.615890] ? security_file_permission+0xb5/0xe0 [ 2410.616329] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.616737] direct_splice_actor+0x113/0x180 [ 2410.617083] splice_direct_to_actor+0x33a/0x8c0 [ 2410.617444] ? __pfx_direct_splice_actor+0x10/0x10 [ 2410.617810] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2410.618184] ? security_file_permission+0xb5/0xe0 [ 2410.618526] do_splice_direct+0x1bc/0x290 [ 2410.618847] ? __pfx_do_splice_direct+0x10/0x10 [ 2410.619195] ? lock_is_held_type+0xdb/0x130 [ 2410.619521] do_sendfile+0xb1d/0x1280 [ 2410.619813] ? __pfx_do_sendfile+0x10/0x10 [ 2410.620145] __x64_sys_sendfile64+0x248/0x2a0 [ 2410.620481] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2410.620855] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.621252] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.621712] do_syscall_64+0x3f/0x90 [ 2410.622005] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.622397] RIP: 0033:0x7fa87f995b19 [ 2410.622680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.624260] RSP: 002b:00007fa87cf0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2410.624963] RAX: ffffffffffffffda RBX: 00007fa87faa8f60 RCX: 00007fa87f995b19 [ 2410.625531] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2410.626058] RBP: 00007fa87cf0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.626577] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2410.627105] R13: 00007ffe323515df R14: 00007fa87cf0b300 R15: 0000000000022000 [ 2410.627646] [ 2410.637292] loop4: detected capacity change from 0 to 40 [ 2410.651614] FAULT_INJECTION: forcing a failure. [ 2410.651614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.652748] CPU: 1 PID: 13292 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.653312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.653901] Call Trace: [ 2410.654141] [ 2410.654315] dump_stack_lvl+0x8f/0xb7 [ 2410.654607] should_fail_ex.cold+0x5/0xa [ 2410.654923] copy_page_from_iter_atomic+0x26e/0x12f0 [ 2410.655293] ? mark_held_locks+0x9e/0xe0 [ 2410.655603] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 2410.655995] ? shmem_write_begin+0x15f/0x360 [ 2410.656322] ? __pfx_shmem_write_begin+0x10/0x10 [ 2410.656695] generic_perform_write+0x2cf/0x580 [ 2410.657041] ? __pfx_generic_perform_write+0x10/0x10 [ 2410.657397] ? __pfx_file_update_time+0x10/0x10 [ 2410.657754] ? generic_write_checks+0x2c0/0x400 [ 2410.658102] __generic_file_write_iter+0x308/0x4b0 [ 2410.658484] generic_file_write_iter+0xe7/0x350 [ 2410.658830] vfs_write+0xa4f/0xe40 [ 2410.659115] ? __pfx_vfs_write+0x10/0x10 [ 2410.659443] __x64_sys_pwrite64+0x1ff/0x260 [ 2410.659758] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 2410.660102] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.660469] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.660821] do_syscall_64+0x3f/0x90 [ 2410.661115] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.661461] RIP: 0033:0x7f85cf7f0ab7 [ 2410.661745] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2410.662872] RSP: 002b:00007f85ccdb2e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2410.663433] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0ab7 [ 2410.663895] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000006 [ 2410.664342] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2410.664795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2410.665254] R13: 0000000000000006 R14: 0000000020001f00 R15: 0000000000000000 [ 2410.665731] [ 2410.721947] syz-executor.0: attempt to access beyond end of device [ 2410.721947] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2410.723203] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2410.727414] syz-executor.7: attempt to access beyond end of device [ 2410.727414] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2410.728723] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2410.754314] loop2: detected capacity change from 0 to 256 13:35:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) [ 2410.767259] FAULT_INJECTION: forcing a failure. [ 2410.767259] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.769035] CPU: 0 PID: 13293 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2410.770123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.771147] Call Trace: [ 2410.771502] [ 2410.771811] dump_stack_lvl+0x8f/0xb7 [ 2410.772354] should_fail_ex.cold+0x5/0xa [ 2410.772921] should_failslab+0x9/0x20 [ 2410.773466] __kmem_cache_alloc_node+0x5b/0x400 [ 2410.774098] ? iter_file_splice_write+0x169/0xcb0 [ 2410.774764] ? iter_file_splice_write+0x169/0xcb0 [ 2410.775417] __kmalloc+0x46/0xc0 [ 2410.775899] iter_file_splice_write+0x169/0xcb0 [ 2410.776538] ? generic_file_read_iter+0x330/0x550 [ 2410.777238] ? generic_file_splice_read+0x1bc/0x4d0 [ 2410.777923] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.778619] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2410.779342] ? inode_security+0x105/0x140 [ 2410.779946] ? security_file_permission+0xb5/0xe0 [ 2410.780603] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2410.781326] direct_splice_actor+0x113/0x180 [ 2410.781941] splice_direct_to_actor+0x33a/0x8c0 [ 2410.782573] ? __pfx_direct_splice_actor+0x10/0x10 13:35:29 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2410.783225] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2410.784050] ? security_file_permission+0xb5/0xe0 [ 2410.784693] do_splice_direct+0x1bc/0x290 [ 2410.785271] ? __pfx_do_splice_direct+0x10/0x10 [ 2410.785906] ? lock_is_held_type+0xdb/0x130 [ 2410.786498] do_sendfile+0xb1d/0x1280 [ 2410.787049] ? __pfx_do_sendfile+0x10/0x10 [ 2410.787639] __x64_sys_sendfile64+0x248/0x2a0 [ 2410.788236] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2410.788890] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.789569] ? syscall_enter_from_user_mode+0x21/0x50 [ 2410.790247] do_syscall_64+0x3f/0x90 [ 2410.790759] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2410.791439] RIP: 0033:0x7faccd749b19 [ 2410.791935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.794195] RSP: 002b:00007faccacbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2410.795166] RAX: ffffffffffffffda RBX: 00007faccd85cf60 RCX: 00007faccd749b19 [ 2410.796061] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2410.796968] RBP: 00007faccacbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.797891] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2410.798792] R13: 00007fff615b2f1f R14: 00007faccacbf300 R15: 0000000000022000 [ 2410.799732] 13:35:29 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x6, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2410.853002] loop6: detected capacity change from 0 to 40 [ 2411.033291] syz-executor.6: attempt to access beyond end of device [ 2411.033291] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2411.034294] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 13) 13:35:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) 13:35:44 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:44 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x7, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) 13:35:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 16) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) 13:35:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2426.278738] loop7: detected capacity change from 0 to 40 [ 2426.304202] loop6: detected capacity change from 0 to 40 [ 2426.314056] loop5: detected capacity change from 0 to 40 [ 2426.317409] FAULT_INJECTION: forcing a failure. [ 2426.317409] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.318314] CPU: 0 PID: 13315 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2426.318999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.319715] Call Trace: [ 2426.319950] [ 2426.320158] dump_stack_lvl+0x8f/0xb7 [ 2426.320517] should_fail_ex.cold+0x5/0xa [ 2426.320885] should_failslab+0x9/0x20 [ 2426.321231] __kmem_cache_alloc_node+0x5b/0x400 [ 2426.321666] ? iter_file_splice_write+0x169/0xcb0 [ 2426.322106] ? iter_file_splice_write+0x169/0xcb0 [ 2426.322538] __kmalloc+0x46/0xc0 [ 2426.322849] iter_file_splice_write+0x169/0xcb0 [ 2426.323260] ? generic_file_read_iter+0x330/0x550 [ 2426.323704] ? generic_file_splice_read+0x1bc/0x4d0 [ 2426.324029] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2426.324457] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2426.324918] ? inode_security+0x105/0x140 [ 2426.325305] ? security_file_permission+0xb5/0xe0 [ 2426.325751] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2426.326209] direct_splice_actor+0x113/0x180 [ 2426.326610] splice_direct_to_actor+0x33a/0x8c0 [ 2426.327025] ? __pfx_direct_splice_actor+0x10/0x10 [ 2426.327457] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2426.327790] ? security_file_permission+0xb5/0xe0 [ 2426.328218] do_splice_direct+0x1bc/0x290 [ 2426.328589] ? __pfx_do_splice_direct+0x10/0x10 [ 2426.329013] ? lock_is_held_type+0xdb/0x130 [ 2426.329412] do_sendfile+0xb1d/0x1280 [ 2426.329774] ? __pfx_do_sendfile+0x10/0x10 [ 2426.330173] __x64_sys_sendfile64+0x248/0x2a0 [ 2426.330574] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2426.331009] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.331458] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.331797] do_syscall_64+0x3f/0x90 [ 2426.332117] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2426.332566] RIP: 0033:0x7ff3421b2b19 [ 2426.332897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.333997] RSP: 002b:00007ff33f728188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2426.334616] RAX: ffffffffffffffda RBX: 00007ff3422c5f60 RCX: 00007ff3421b2b19 [ 2426.335225] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2426.335830] RBP: 00007ff33f7281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.336435] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2426.337050] R13: 00007ffdc5754e3f R14: 00007ff33f728300 R15: 0000000000022000 [ 2426.337690] [ 2426.352254] FAULT_INJECTION: forcing a failure. [ 2426.352254] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.353416] CPU: 0 PID: 13324 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2426.354093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.354605] Call Trace: [ 2426.354827] [ 2426.355027] dump_stack_lvl+0x8f/0xb7 [ 2426.355366] should_fail_ex.cold+0x5/0xa [ 2426.355734] ? getname_flags.part.0+0x50/0x4f0 [ 2426.356152] should_failslab+0x9/0x20 [ 2426.356490] kmem_cache_alloc+0x5a/0x410 [ 2426.356857] getname_flags.part.0+0x50/0x4f0 [ 2426.357237] ? vfs_write+0x51b/0xe40 [ 2426.357599] getname+0x92/0xe0 [ 2426.357891] do_sys_openat2+0xf9/0x4c0 [ 2426.358237] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2426.358670] ? syscall_enter_from_user_mode+0x1c/0x50 [ 2426.359103] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2426.359537] ? __pfx_do_sys_openat2+0x10/0x10 [ 2426.359942] ? perf_trace_preemptirq_template+0x272/0x410 [ 2426.360428] __x64_sys_openat+0x143/0x200 [ 2426.360435] loop0: detected capacity change from 0 to 40 [ 2426.360793] ? __pfx___x64_sys_openat+0x10/0x10 [ 2426.360825] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.362414] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.362874] do_syscall_64+0x3f/0x90 [ 2426.363199] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2426.363604] loop4: detected capacity change from 0 to 40 [ 2426.363650] RIP: 0033:0x7f85cf7f0a04 [ 2426.364679] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2426.366213] RSP: 002b:00007f85ccdb2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2426.366881] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0a04 [ 2426.367488] RDX: 0000000000000002 RSI: 00007f85ccdb2f40 RDI: 00000000ffffff9c [ 2426.368105] RBP: 00007f85ccdb2f40 R08: 0000000000000000 R09: 0000000000000000 [ 2426.368717] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2426.369328] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2426.369972] [ 2426.378327] FAT-fs (loop1): bogus number of reserved sectors [ 2426.379251] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2426.440113] syz-executor.6: attempt to access beyond end of device [ 2426.440113] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2426.441379] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2426.481874] FAULT_INJECTION: forcing a failure. [ 2426.481874] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.483879] CPU: 1 PID: 13327 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2426.484956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.486043] Call Trace: [ 2426.486387] [ 2426.486704] dump_stack_lvl+0x8f/0xb7 [ 2426.487257] should_fail_ex.cold+0x5/0xa [ 2426.487826] should_failslab+0x9/0x20 [ 2426.488370] __kmem_cache_alloc_node+0x5b/0x400 [ 2426.489012] ? iter_file_splice_write+0x169/0xcb0 [ 2426.489685] ? iter_file_splice_write+0x169/0xcb0 [ 2426.490352] __kmalloc+0x46/0xc0 [ 2426.490837] iter_file_splice_write+0x169/0xcb0 [ 2426.491475] ? generic_file_read_iter+0x330/0x550 [ 2426.492134] ? generic_file_splice_read+0x1bc/0x4d0 [ 2426.492812] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2426.493506] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2426.494221] ? inode_security+0x105/0x140 [ 2426.494804] ? security_file_permission+0xb5/0xe0 [ 2426.495466] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2426.496158] direct_splice_actor+0x113/0x180 [ 2426.496773] splice_direct_to_actor+0x33a/0x8c0 [ 2426.497411] ? __pfx_direct_splice_actor+0x10/0x10 [ 2426.498084] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2426.498764] ? security_file_permission+0xb5/0xe0 [ 2426.499451] do_splice_direct+0x1bc/0x290 [ 2426.499999] ? __pfx_do_splice_direct+0x10/0x10 [ 2426.500637] ? lock_is_held_type+0xdb/0x130 [ 2426.501242] do_sendfile+0xb1d/0x1280 [ 2426.501808] ? __pfx_do_sendfile+0x10/0x10 [ 2426.502391] __x64_sys_sendfile64+0x248/0x2a0 [ 2426.502997] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2426.503655] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.504309] ? syscall_enter_from_user_mode+0x21/0x50 [ 2426.505010] do_syscall_64+0x3f/0x90 [ 2426.505533] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2426.506208] RIP: 0033:0x7f0eb6263b19 [ 2426.506689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.508923] RSP: 002b:00007f0eb37d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2426.509867] RAX: ffffffffffffffda RBX: 00007f0eb6376f60 RCX: 00007f0eb6263b19 [ 2426.510757] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2426.511628] RBP: 00007f0eb37d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.512528] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2426.513469] R13: 00007ffe15765a5f R14: 00007f0eb37d9300 R15: 0000000000022000 [ 2426.514359] 13:35:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 14) 13:35:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) [ 2426.566288] syz-executor.4: attempt to access beyond end of device [ 2426.566288] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2426.568566] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 17) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2426.675918] loop6: detected capacity change from 0 to 40 [ 2426.696197] loop7: detected capacity change from 0 to 40 13:35:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) [ 2426.839982] loop2: detected capacity change from 0 to 256 13:35:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 13:35:45 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x8, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 18) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2426.956591] loop4: detected capacity change from 0 to 40 [ 2426.994827] FAULT_INJECTION: forcing a failure. [ 2426.994827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2426.995924] CPU: 0 PID: 13342 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2426.996666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.997373] Call Trace: [ 2426.997611] [ 2426.997807] dump_stack_lvl+0x8f/0xb7 [ 2426.998160] should_fail_ex.cold+0x5/0xa [ 2426.998556] strncpy_from_user+0x38/0x500 [ 2426.998944] getname_flags.part.0+0x95/0x4f0 [ 2426.999354] ? vfs_write+0x51b/0xe40 [ 2426.999710] getname+0x92/0xe0 [ 2427.000021] do_sys_openat2+0xf9/0x4c0 [ 2427.000370] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2427.000820] ? syscall_enter_from_user_mode+0x1c/0x50 [ 2427.001284] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2427.001616] ? __pfx_do_sys_openat2+0x10/0x10 [ 2427.002012] ? perf_trace_preemptirq_template+0x272/0x410 [ 2427.002595] __x64_sys_openat+0x143/0x200 [ 2427.002884] ? __pfx___x64_sys_openat+0x10/0x10 [ 2427.003209] ? syscall_enter_from_user_mode+0x21/0x50 [ 2427.003544] ? syscall_enter_from_user_mode+0x21/0x50 [ 2427.003884] do_syscall_64+0x3f/0x90 [ 2427.004138] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2427.004487] RIP: 0033:0x7f85cf7f0a04 [ 2427.004745] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2427.005872] RSP: 002b:00007f85ccdb2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2427.006353] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0a04 [ 2427.006812] RDX: 0000000000000002 RSI: 00007f85ccdb2f40 RDI: 00000000ffffff9c [ 2427.007270] RBP: 00007f85ccdb2f40 R08: 0000000000000000 R09: 0000000000000000 [ 2427.007734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2427.008198] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2427.008673] [ 2427.089064] syz-executor.4: attempt to access beyond end of device [ 2427.089064] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.090144] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2427.092978] loop0: detected capacity change from 0 to 40 [ 2427.107940] syz-executor.7: attempt to access beyond end of device [ 2427.107940] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.109028] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2427.111157] syz-executor.6: attempt to access beyond end of device [ 2427.111157] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.112971] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 19) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) [ 2427.228402] FAULT_INJECTION: forcing a failure. [ 2427.228402] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.229858] CPU: 0 PID: 13348 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2427.230528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2427.231197] Call Trace: [ 2427.231419] [ 2427.231618] dump_stack_lvl+0x8f/0xb7 [ 2427.231954] should_fail_ex.cold+0x5/0xa [ 2427.232315] ? __alloc_file+0x21/0x240 [ 2427.232658] should_failslab+0x9/0x20 [ 2427.232996] kmem_cache_alloc+0x5a/0x410 [ 2427.233353] __alloc_file+0x21/0x240 [ 2427.233707] alloc_empty_file+0x71/0x170 [ 2427.234059] path_openat+0xd4/0x29b0 [ 2427.234408] ? __pfx_path_openat+0x10/0x10 [ 2427.234789] do_filp_open+0x1ba/0x410 [ 2427.235130] ? __pfx_do_filp_open+0x10/0x10 [ 2427.235502] ? find_held_lock+0x2c/0x110 [ 2427.235858] ? lock_release+0x3b6/0x750 [ 2427.236210] ? do_raw_spin_lock+0x125/0x270 [ 2427.236586] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2427.237002] ? _raw_spin_unlock+0x28/0x50 [ 2427.237360] ? alloc_fd+0x2d8/0x6e0 [ 2427.237706] do_sys_openat2+0x171/0x4c0 [ 2427.238051] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2427.238472] ? syscall_enter_from_user_mode+0x1c/0x50 [ 2427.238910] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2427.239338] ? __pfx_do_sys_openat2+0x10/0x10 [ 2427.239736] ? perf_trace_preemptirq_template+0x272/0x410 [ 2427.240217] __x64_sys_openat+0x143/0x200 [ 2427.240580] ? __pfx___x64_sys_openat+0x10/0x10 [ 2427.240984] ? syscall_enter_from_user_mode+0x21/0x50 [ 2427.241424] ? syscall_enter_from_user_mode+0x21/0x50 [ 2427.241868] do_syscall_64+0x3f/0x90 [ 2427.242194] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2427.242632] RIP: 0033:0x7f85cf7f0a04 [ 2427.242951] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2427.244382] RSP: 002b:00007f85ccdb2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2427.244998] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0a04 [ 2427.245594] RDX: 0000000000000002 RSI: 00007f85ccdb2f40 RDI: 00000000ffffff9c [ 2427.246185] RBP: 00007f85ccdb2f40 R08: 0000000000000000 R09: 0000000000000000 [ 2427.246759] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2427.247331] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2427.247926] [ 2427.314136] loop4: detected capacity change from 0 to 40 [ 2427.343190] syz-executor.0: attempt to access beyond end of device [ 2427.343190] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.344778] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2427.390160] syz-executor.4: attempt to access beyond end of device [ 2427.390160] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.391533] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 13:35:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 15) 13:35:58 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xe3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2439.837931] loop7: detected capacity change from 0 to 40 13:35:58 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2439.864006] loop0: detected capacity change from 0 to 40 [ 2439.865013] loop5: detected capacity change from 0 to 40 13:35:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 13:35:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:35:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 20) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:35:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) [ 2439.883360] loop6: detected capacity change from 0 to 40 [ 2439.888626] FAT-fs (loop1): bogus number of reserved sectors [ 2439.889103] loop2: detected capacity change from 0 to 256 [ 2439.889733] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2439.930201] loop4: detected capacity change from 0 to 40 [ 2440.053851] syz-executor.4: attempt to access beyond end of device [ 2440.053851] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2440.054806] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:35:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 21) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2440.151881] syz-executor.0: attempt to access beyond end of device [ 2440.151881] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2440.152955] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2440.168107] syz-executor.7: attempt to access beyond end of device [ 2440.168107] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2440.169273] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2440.191760] syz-executor.6: attempt to access beyond end of device [ 2440.191760] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2440.192974] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:35:58 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:35:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) [ 2440.228382] FAULT_INJECTION: forcing a failure. [ 2440.228382] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.229431] CPU: 1 PID: 13381 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2440.229993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.230532] Call Trace: [ 2440.230716] [ 2440.230880] dump_stack_lvl+0x8f/0xb7 [ 2440.231156] should_fail_ex.cold+0x5/0xa [ 2440.231450] ? security_file_alloc+0x38/0x170 [ 2440.231763] should_failslab+0x9/0x20 [ 2440.232038] kmem_cache_alloc+0x5a/0x410 [ 2440.232335] security_file_alloc+0x38/0x170 [ 2440.232636] __alloc_file+0xb6/0x240 [ 2440.232902] alloc_empty_file+0x71/0x170 [ 2440.233185] path_openat+0xd4/0x29b0 [ 2440.233469] ? __pfx_path_openat+0x10/0x10 [ 2440.233812] do_filp_open+0x1ba/0x410 [ 2440.234087] ? __pfx_do_filp_open+0x10/0x10 [ 2440.234388] ? find_held_lock+0x2c/0x110 [ 2440.234678] ? lock_release+0x3b6/0x750 [ 2440.234962] ? do_raw_spin_lock+0x125/0x270 [ 2440.235265] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2440.235602] ? _raw_spin_unlock+0x28/0x50 [ 2440.235891] ? alloc_fd+0x2d8/0x6e0 [ 2440.236163] do_sys_openat2+0x171/0x4c0 [ 2440.236449] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2440.236792] ? syscall_enter_from_user_mode+0x1c/0x50 [ 2440.237143] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2440.237491] ? __pfx_do_sys_openat2+0x10/0x10 [ 2440.237816] ? perf_trace_preemptirq_template+0x272/0x410 [ 2440.238203] __x64_sys_openat+0x143/0x200 [ 2440.238489] ? __pfx___x64_sys_openat+0x10/0x10 [ 2440.238922] ? syscall_enter_from_user_mode+0x21/0x50 [ 2440.239255] ? syscall_enter_from_user_mode+0x21/0x50 [ 2440.239602] do_syscall_64+0x3f/0x90 [ 2440.239857] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2440.240196] RIP: 0033:0x7f85cf7f0a04 [ 2440.240445] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2440.241577] RSP: 002b:00007f85ccdb2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2440.242060] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf7f0a04 [ 2440.242510] RDX: 0000000000000002 RSI: 00007f85ccdb2f40 RDI: 00000000ffffff9c [ 2440.242961] RBP: 00007f85ccdb2f40 R08: 0000000000000000 R09: 0000000000000000 [ 2440.243414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2440.243863] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2440.244326] [ 2440.341731] loop4: detected capacity change from 0 to 40 [ 2440.409226] syz-executor.4: attempt to access beyond end of device [ 2440.409226] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2440.411337] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:36:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) 13:36:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:12 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x110, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:12 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 16) [ 2454.291096] loop6: detected capacity change from 0 to 40 13:36:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) 13:36:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) 13:36:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 22) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2454.314172] loop4: detected capacity change from 0 to 40 [ 2454.325159] loop0: detected capacity change from 0 to 40 [ 2454.327784] loop7: detected capacity change from 0 to 40 [ 2454.344293] loop5: detected capacity change from 0 to 40 [ 2454.367600] FAT-fs (loop1): bogus number of reserved sectors [ 2454.368111] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2454.427287] loop2: detected capacity change from 0 to 256 [ 2454.497396] syz-executor.4: attempt to access beyond end of device [ 2454.497396] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.498276] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2454.543382] syz-executor.7: attempt to access beyond end of device [ 2454.543382] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.544723] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2454.546974] syz-executor.6: attempt to access beyond end of device [ 2454.546974] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.548137] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2454.564735] syz-executor.0: attempt to access beyond end of device [ 2454.564735] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.565855] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 23) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) [ 2454.664210] FAULT_INJECTION: forcing a failure. [ 2454.664210] name failslab, interval 1, probability 0, space 0, times 0 13:36:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x218, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2454.666103] CPU: 0 PID: 13417 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2454.667387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.668532] Call Trace: [ 2454.668892] [ 2454.669217] dump_stack_lvl+0x8f/0xb7 [ 2454.669798] should_fail_ex.cold+0x5/0xa [ 2454.670387] ? __kernfs_new_node+0xd4/0x8c0 [ 2454.671003] should_failslab+0x9/0x20 [ 2454.671559] kmem_cache_alloc+0x5a/0x410 [ 2454.672151] __kernfs_new_node+0xd4/0x8c0 [ 2454.672758] ? __pfx___kernfs_new_node+0x10/0x10 [ 2454.673428] ? selinux_sb_statfs+0x1be/0x250 [ 2454.674074] ? __pfx_selinux_sb_statfs+0x10/0x10 [ 2454.674718] ? static_obj+0xba/0xc0 [ 2454.675253] ? shmem_statfs+0x1b7/0x3e0 [ 2454.675835] kernfs_create_dir_ns+0xa0/0x230 [ 2454.676480] internal_create_group+0x786/0xb20 [ 2454.677146] ? __pfx_internal_create_group+0x10/0x10 [ 2454.677891] loop_configure+0xf37/0x1a00 [ 2454.678494] lo_ioctl+0x93a/0x1990 [ 2454.679022] ? __pfx_lo_ioctl+0x10/0x10 [ 2454.679646] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2454.680367] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2454.681191] ? lock_is_held_type+0xdb/0x130 [ 2454.681825] ? irqentry_enter+0x2a/0x60 [ 2454.682381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2454.683128] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2454.683876] ? lockdep_hardirqs_on+0x7d/0x100 [ 2454.684518] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2454.685333] ? blkdev_ioctl+0x124/0xa00 [ 2454.685927] ? __pfx_lo_ioctl+0x10/0x10 [ 2454.686492] blkdev_ioctl+0x350/0xa00 [ 2454.687049] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2454.687668] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 2454.688411] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2454.689036] __x64_sys_ioctl+0x19e/0x210 [ 2454.689619] do_syscall_64+0x3f/0x90 [ 2454.690153] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2454.690867] RIP: 0033:0x7f85cf83d8d7 [ 2454.691381] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.693773] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.694800] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2454.695748] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2454.696699] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2454.697658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2454.698627] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2454.699611] [ 2454.700831] loop2: detected capacity change from 0 to 256 13:36:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) 13:36:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 17) 13:36:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) [ 2454.811073] loop4: detected capacity change from 0 to 40 [ 2454.910304] FAULT_INJECTION: forcing a failure. [ 2454.910304] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.911990] CPU: 1 PID: 13422 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2454.913068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.914103] Call Trace: [ 2454.914454] [ 2454.914762] dump_stack_lvl+0x8f/0xb7 [ 2454.915283] should_fail_ex.cold+0x5/0xa [ 2454.915848] should_failslab+0x9/0x20 [ 2454.916361] __kmem_cache_alloc_node+0x5b/0x400 [ 2454.916978] ? iter_file_splice_write+0x169/0xcb0 [ 2454.917627] ? iter_file_splice_write+0x169/0xcb0 [ 2454.918291] __kmalloc+0x46/0xc0 [ 2454.918764] iter_file_splice_write+0x169/0xcb0 [ 2454.919382] ? generic_file_read_iter+0x330/0x550 [ 2454.920039] ? generic_file_splice_read+0x1bc/0x4d0 [ 2454.920708] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2454.921369] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2454.922076] ? inode_security+0x105/0x140 [ 2454.922652] ? security_file_permission+0xb5/0xe0 [ 2454.923293] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2454.923969] direct_splice_actor+0x113/0x180 [ 2454.924559] splice_direct_to_actor+0x33a/0x8c0 [ 2454.925180] ? __pfx_direct_splice_actor+0x10/0x10 [ 2454.925858] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2454.926532] ? security_file_permission+0xb5/0xe0 [ 2454.927184] do_splice_direct+0x1bc/0x290 [ 2454.927726] ? __pfx_do_splice_direct+0x10/0x10 [ 2454.928346] ? lock_is_held_type+0xdb/0x130 [ 2454.928942] do_sendfile+0xb1d/0x1280 [ 2454.929480] ? __pfx_do_sendfile+0x10/0x10 [ 2454.930086] __x64_sys_sendfile64+0x248/0x2a0 [ 2454.930679] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2454.931330] ? syscall_enter_from_user_mode+0x21/0x50 [ 2454.932005] ? syscall_enter_from_user_mode+0x21/0x50 [ 2454.932685] do_syscall_64+0x3f/0x90 [ 2454.933289] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2454.934196] RIP: 0033:0x7faccd749b19 [ 2454.934773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.937041] RSP: 002b:00007faccacbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2454.938104] RAX: ffffffffffffffda RBX: 00007faccd85cf60 RCX: 00007faccd749b19 [ 2454.938998] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2454.939890] RBP: 00007faccacbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.940796] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2454.941702] R13: 00007fff615b2f1f R14: 00007faccacbf300 R15: 0000000000022000 [ 2454.942645] 13:36:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 24) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2454.956999] loop0: detected capacity change from 0 to 40 [ 2454.957353] loop6: detected capacity change from 0 to 40 [ 2454.960213] loop7: detected capacity change from 0 to 40 [ 2455.082806] loop2: detected capacity change from 0 to 256 13:36:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 13:36:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x300, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2455.227451] syz-executor.7: attempt to access beyond end of device [ 2455.227451] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2455.229915] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2455.298096] syz-executor.0: attempt to access beyond end of device [ 2455.298096] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2455.300080] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2455.354365] loop4: detected capacity change from 0 to 40 [ 2455.374157] syz-executor.6: attempt to access beyond end of device [ 2455.374157] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2455.376381] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2455.538168] syz-executor.4: attempt to access beyond end of device [ 2455.538168] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2455.543381] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2469.533305] loop6: detected capacity change from 0 to 40 13:36:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 18) 13:36:27 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x500, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) 13:36:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 25) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 13:36:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) [ 2469.538940] loop7: detected capacity change from 0 to 40 [ 2469.547215] loop5: detected capacity change from 0 to 40 [ 2469.551316] loop0: detected capacity change from 0 to 40 [ 2469.560413] FAULT_INJECTION: forcing a failure. [ 2469.560413] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.561648] CPU: 1 PID: 13459 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2469.562195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.562746] Call Trace: [ 2469.562935] [ 2469.563098] dump_stack_lvl+0x8f/0xb7 [ 2469.563370] should_fail_ex.cold+0x5/0xa [ 2469.563671] ? __kernfs_new_node+0xd4/0x8c0 [ 2469.563982] should_failslab+0x9/0x20 [ 2469.564269] kmem_cache_alloc+0x5a/0x410 [ 2469.564572] __kernfs_new_node+0xd4/0x8c0 [ 2469.564879] ? __pfx___kernfs_new_node+0x10/0x10 [ 2469.565217] ? perf_trace_preemptirq_template+0x272/0x410 [ 2469.565627] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2469.566068] ? kernfs_add_one+0x175/0x4f0 [ 2469.566370] ? mark_held_locks+0x9e/0xe0 [ 2469.566665] kernfs_new_node+0x97/0x120 [ 2469.566955] __kernfs_create_file+0x55/0x350 [ 2469.567260] sysfs_add_file_mode_ns+0x21c/0x440 [ 2469.567593] ? __pfx_dev_attr_store+0x10/0x10 [ 2469.567915] internal_create_group+0x322/0xb20 [ 2469.568240] ? __pfx_internal_create_group+0x10/0x10 [ 2469.568604] loop_configure+0xf37/0x1a00 [ 2469.568899] lo_ioctl+0x93a/0x1990 [ 2469.569160] ? __pfx_lo_ioctl+0x10/0x10 [ 2469.569437] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2469.569795] ? __pfx_perf_tp_event+0x10/0x10 [ 2469.570151] ? __lock_acquire+0xbad/0x5e70 [ 2469.570470] ? trace_rcu_dyntick+0x1a7/0x250 [ 2469.570840] ? __pfx_lock_release+0x10/0x10 [ 2469.571175] ? __pfx_lo_ioctl+0x10/0x10 [ 2469.571460] blkdev_ioctl+0x350/0xa00 [ 2469.571753] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2469.572079] ? selinux_file_ioctl+0xb5/0x260 [ 2469.572413] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2469.572737] __x64_sys_ioctl+0x19e/0x210 [ 2469.573044] do_syscall_64+0x3f/0x90 [ 2469.573333] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2469.573704] RIP: 0033:0x7f85cf83d8d7 [ 2469.573980] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2469.575208] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2469.575727] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2469.576040] loop4: detected capacity change from 0 to 40 [ 2469.576212] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2469.577442] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2469.577928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2469.578452] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2469.578978] [ 2469.604752] FAULT_INJECTION: forcing a failure. [ 2469.604752] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.606007] CPU: 1 PID: 13456 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2469.606551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.607082] Call Trace: [ 2469.607261] [ 2469.607422] dump_stack_lvl+0x8f/0xb7 [ 2469.607691] should_fail_ex.cold+0x5/0xa [ 2469.607982] should_failslab+0x9/0x20 [ 2469.608248] __kmem_cache_alloc_node+0x5b/0x400 [ 2469.608568] ? iter_file_splice_write+0x169/0xcb0 [ 2469.608910] ? iter_file_splice_write+0x169/0xcb0 [ 2469.609238] __kmalloc+0x46/0xc0 [ 2469.609482] iter_file_splice_write+0x169/0xcb0 [ 2469.609814] ? generic_file_read_iter+0x330/0x550 [ 2469.610168] ? generic_file_splice_read+0x1bc/0x4d0 [ 2469.610507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2469.610863] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2469.611234] ? inode_security+0x105/0x140 [ 2469.611537] ? security_file_permission+0xb5/0xe0 [ 2469.611879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2469.612232] direct_splice_actor+0x113/0x180 [ 2469.612541] splice_direct_to_actor+0x33a/0x8c0 [ 2469.612873] ? __pfx_direct_splice_actor+0x10/0x10 [ 2469.613212] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2469.613568] ? security_file_permission+0xb5/0xe0 [ 2469.613916] do_splice_direct+0x1bc/0x290 [ 2469.614220] ? __pfx_do_splice_direct+0x10/0x10 [ 2469.614561] ? lock_is_held_type+0xdb/0x130 [ 2469.614885] do_sendfile+0xb1d/0x1280 [ 2469.615184] ? __pfx_do_sendfile+0x10/0x10 [ 2469.615512] __x64_sys_sendfile64+0x248/0x2a0 [ 2469.615845] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2469.616211] ? syscall_enter_from_user_mode+0x21/0x50 [ 2469.616586] ? syscall_enter_from_user_mode+0x21/0x50 [ 2469.616960] do_syscall_64+0x3f/0x90 [ 2469.617230] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2469.617602] RIP: 0033:0x7fa87f995b19 [ 2469.617873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2469.619120] RSP: 002b:00007fa87cf0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2469.619643] RAX: ffffffffffffffda RBX: 00007fa87faa8f60 RCX: 00007fa87f995b19 [ 2469.620133] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2469.620625] RBP: 00007fa87cf0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2469.621121] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2469.621621] R13: 00007ffe323515df R14: 00007fa87cf0b300 R15: 0000000000022000 [ 2469.622141] [ 2469.649216] FAT-fs (loop1): bogus number of reserved sectors [ 2469.650192] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2469.673749] loop2: detected capacity change from 0 to 256 [ 2469.728279] FAULT_INJECTION: forcing a failure. [ 2469.728279] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.729319] CPU: 1 PID: 13463 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2469.729887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.730444] Call Trace: [ 2469.730631] [ 2469.730800] dump_stack_lvl+0x8f/0xb7 [ 2469.731077] should_fail_ex.cold+0x5/0xa [ 2469.731387] ? jbd2__journal_start+0x194/0x8d0 [ 2469.731725] should_failslab+0x9/0x20 [ 2469.732001] kmem_cache_alloc+0x5a/0x410 [ 2469.732361] ? lock_is_held_type+0xdb/0x130 [ 2469.732777] jbd2__journal_start+0x194/0x8d0 [ 2469.733102] __ext4_journal_start_sb+0x4a5/0x6b0 [ 2469.733438] ? ext4_dirty_inode+0xa5/0x130 [ 2469.733749] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2469.734087] ext4_dirty_inode+0xa5/0x130 [ 2469.734450] __mark_inode_dirty+0x1aa/0xe70 [ 2469.734800] generic_update_time+0x21b/0x2b0 [ 2469.735125] file_modified_flags+0x2d4/0x330 [ 2469.735551] ? __pfx_file_modified_flags+0x10/0x10 [ 2469.735971] ? __pfx_down_write+0x10/0x10 [ 2469.736333] ext4_buffered_write_iter+0xf9/0x460 [ 2469.736684] ? stack_trace_save+0x90/0xd0 [ 2469.736979] ext4_file_write_iter+0x3ff/0x1930 [ 2469.737329] ? iter_file_splice_write+0x169/0xcb0 [ 2469.737790] ? kasan_save_stack+0x35/0x50 [ 2469.738113] ? kasan_save_stack+0x22/0x50 [ 2469.738413] ? kasan_set_track+0x25/0x30 [ 2469.738777] ? __kasan_kmalloc+0x82/0x90 [ 2469.739159] ? __kmalloc+0x56/0xc0 [ 2469.739426] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 2469.739799] ? do_splice_direct+0x1bc/0x290 [ 2469.740202] ? do_sendfile+0xb1d/0x1280 [ 2469.740625] ? __x64_sys_sendfile64+0x248/0x2a0 [ 2469.740965] ? lock_is_held_type+0xdb/0x130 [ 2469.741393] do_iter_readv_writev+0x211/0x3c0 [ 2469.741731] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2469.742122] ? avc_policy_seqno+0xd/0x70 [ 2469.742431] ? security_file_permission+0xb5/0xe0 [ 2469.742822] do_iter_write+0x18b/0x700 [ 2469.743138] ? lock_is_held_type+0xdb/0x130 [ 2469.743485] vfs_iter_write+0x74/0xb0 [ 2469.743796] iter_file_splice_write+0x73e/0xcb0 [ 2469.744166] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2469.744542] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2469.744973] ? security_file_permission+0xb5/0xe0 [ 2469.745442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2469.745896] direct_splice_actor+0x113/0x180 [ 2469.746237] splice_direct_to_actor+0x33a/0x8c0 [ 2469.746632] ? __pfx_direct_splice_actor+0x10/0x10 [ 2469.747073] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2469.747445] ? security_file_permission+0xb5/0xe0 [ 2469.747883] do_splice_direct+0x1bc/0x290 [ 2469.748295] ? __pfx_do_splice_direct+0x10/0x10 [ 2469.748651] ? lock_is_held_type+0xdb/0x130 [ 2469.748991] do_sendfile+0xb1d/0x1280 [ 2469.749309] ? __pfx_do_sendfile+0x10/0x10 [ 2469.749635] __x64_sys_sendfile64+0x248/0x2a0 [ 2469.749965] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2469.750326] ? syscall_enter_from_user_mode+0x21/0x50 [ 2469.750709] ? syscall_enter_from_user_mode+0x21/0x50 [ 2469.751079] do_syscall_64+0x3f/0x90 [ 2469.751368] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2469.751748] RIP: 0033:0x7faccd749b19 [ 2469.752018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2469.753307] RSP: 002b:00007faccacbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2469.753947] RAX: ffffffffffffffda RBX: 00007faccd85cf60 RCX: 00007faccd749b19 [ 2469.754445] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 2469.754948] RBP: 00007faccacbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2469.755476] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2469.756097] R13: 00007fff615b2f1f R14: 00007faccacbf300 R15: 0000000000022000 [ 2469.756625] [ 2469.810990] syz-executor.7: attempt to access beyond end of device [ 2469.810990] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2469.812028] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:36:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 13:36:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 26) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:28 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x600, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2469.891079] syz-executor.0: attempt to access beyond end of device [ 2469.891079] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2469.892214] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 19) [ 2469.977743] loop6: detected capacity change from 0 to 40 [ 2470.007414] loop2: detected capacity change from 0 to 256 13:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) [ 2470.055217] FAULT_INJECTION: forcing a failure. [ 2470.055217] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.056278] CPU: 1 PID: 13475 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2470.056818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.057349] Call Trace: [ 2470.057530] [ 2470.057688] dump_stack_lvl+0x8f/0xb7 [ 2470.057966] should_fail_ex.cold+0x5/0xa [ 2470.058248] should_failslab+0x9/0x20 [ 2470.058519] __kmem_cache_alloc_node+0x5b/0x400 [ 2470.058848] ? iter_file_splice_write+0x169/0xcb0 [ 2470.059175] ? iter_file_splice_write+0x169/0xcb0 [ 2470.059634] __kmalloc+0x46/0xc0 [ 2470.059891] iter_file_splice_write+0x169/0xcb0 [ 2470.060211] ? generic_file_read_iter+0x330/0x550 [ 2470.060555] ? generic_file_splice_read+0x1bc/0x4d0 [ 2470.060917] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2470.061337] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2470.061746] ? inode_security+0x105/0x140 [ 2470.062069] ? security_file_permission+0xb5/0xe0 [ 2470.062397] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2470.062831] direct_splice_actor+0x113/0x180 [ 2470.063235] splice_direct_to_actor+0x33a/0x8c0 [ 2470.063631] ? __pfx_direct_splice_actor+0x10/0x10 [ 2470.063959] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2470.064301] ? security_file_permission+0xb5/0xe0 [ 2470.064633] do_splice_direct+0x1bc/0x290 [ 2470.064921] ? __pfx_do_splice_direct+0x10/0x10 [ 2470.065251] ? lock_is_held_type+0xdb/0x130 [ 2470.065559] do_sendfile+0xb1d/0x1280 [ 2470.065846] ? __pfx_do_sendfile+0x10/0x10 [ 2470.066163] __x64_sys_sendfile64+0x248/0x2a0 [ 2470.066472] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2470.066811] ? syscall_enter_from_user_mode+0x21/0x50 [ 2470.067160] ? syscall_enter_from_user_mode+0x21/0x50 [ 2470.067511] do_syscall_64+0x3f/0x90 [ 2470.067772] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2470.068119] RIP: 0033:0x7fa87f995b19 [ 2470.068372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.069538] RSP: 002b:00007fa87cf0b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2470.070034] RAX: ffffffffffffffda RBX: 00007fa87faa8f60 RCX: 00007fa87f995b19 [ 2470.070537] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2470.071098] RBP: 00007fa87cf0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.071561] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2470.072030] R13: 00007ffe323515df R14: 00007fa87cf0b300 R15: 0000000000022000 [ 2470.072603] [ 2470.074484] loop7: detected capacity change from 0 to 40 [ 2470.181180] loop0: detected capacity change from 0 to 40 13:36:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 27) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) 13:36:28 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x700, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2470.357717] loop6: detected capacity change from 0 to 40 [ 2470.370911] FAULT_INJECTION: forcing a failure. [ 2470.370911] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.372124] CPU: 1 PID: 13485 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2470.372678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.373231] Call Trace: [ 2470.373415] [ 2470.373583] dump_stack_lvl+0x8f/0xb7 [ 2470.373857] should_fail_ex.cold+0x5/0xa [ 2470.374166] ? __kernfs_new_node+0xd4/0x8c0 [ 2470.374473] should_failslab+0x9/0x20 [ 2470.374748] kmem_cache_alloc+0x5a/0x410 [ 2470.375039] __kernfs_new_node+0xd4/0x8c0 [ 2470.375340] ? lock_release+0x3b6/0x750 [ 2470.375626] ? __pfx___kernfs_new_node+0x10/0x10 [ 2470.375958] ? __pfx_lock_release+0x10/0x10 [ 2470.376284] ? up_write+0x1b0/0x520 [ 2470.376555] kernfs_new_node+0x97/0x120 [ 2470.376852] __kernfs_create_file+0x55/0x350 [ 2470.377167] sysfs_add_file_mode_ns+0x21c/0x440 [ 2470.377515] ? __pfx_dev_attr_store+0x10/0x10 [ 2470.377847] internal_create_group+0x322/0xb20 [ 2470.378202] ? __pfx_internal_create_group+0x10/0x10 [ 2470.378594] loop_configure+0xf37/0x1a00 [ 2470.378910] lo_ioctl+0x93a/0x1990 [ 2470.379185] ? __pfx_lo_ioctl+0x10/0x10 [ 2470.379485] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2470.379880] ? __pfx_perf_tp_event+0x10/0x10 [ 2470.380190] ? __lock_acquire+0xbad/0x5e70 [ 2470.380520] ? trace_rcu_dyntick+0x1a7/0x250 [ 2470.380886] ? __pfx_lock_release+0x10/0x10 [ 2470.381216] ? __pfx_lo_ioctl+0x10/0x10 [ 2470.381516] blkdev_ioctl+0x350/0xa00 [ 2470.381792] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2470.382117] ? selinux_file_ioctl+0xb5/0x260 [ 2470.382451] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2470.382779] __x64_sys_ioctl+0x19e/0x210 [ 2470.383082] do_syscall_64+0x3f/0x90 [ 2470.383359] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2470.383734] RIP: 0033:0x7f85cf83d8d7 [ 2470.384003] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.385275] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.385770] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2470.386295] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2470.386795] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2470.387299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2470.387802] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2470.388322] [ 2470.406538] syz-executor.7: attempt to access beyond end of device [ 2470.406538] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2470.407687] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2470.481273] syz-executor.0: attempt to access beyond end of device [ 2470.481273] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2470.482690] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2470.517352] loop2: detected capacity change from 0 to 256 [ 2470.567721] syz-executor.6: attempt to access beyond end of device [ 2470.567721] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2470.568786] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2470.580229] loop4: detected capacity change from 0 to 40 [ 2470.616231] syz-executor.4: attempt to access beyond end of device [ 2470.616231] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2470.617119] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2484.560620] FAT-fs (loop1): bogus number of reserved sectors [ 2484.561396] FAT-fs (loop1): Can't find a valid FAT filesystem 13:36:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:43 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1001, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file1\x00'}) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x10) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfe, 0x0, 0x8, 0x0, 0x0, 0x10180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8401, 0x9, 0x3, 0x4, 0x80000001, 0xd, 0x2, 0x0, 0x3fffc00}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:36:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24) 13:36:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) 13:36:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 28) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 20) [ 2484.586279] loop7: detected capacity change from 0 to 40 [ 2484.635329] loop5: detected capacity change from 0 to 40 [ 2484.645737] loop4: detected capacity change from 0 to 40 [ 2484.648615] loop6: detected capacity change from 0 to 40 [ 2484.650987] loop0: detected capacity change from 0 to 40 [ 2484.695060] loop2: detected capacity change from 0 to 256 [ 2484.833053] syz-executor.4: attempt to access beyond end of device [ 2484.833053] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2484.834874] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2484.894161] syz-executor.4: attempt to access beyond end of device [ 2484.894161] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2484.895873] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2485.063384] syz-executor.7: attempt to access beyond end of device [ 2485.063384] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2485.065144] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2485.078213] syz-executor.6: attempt to access beyond end of device [ 2485.078213] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2485.079769] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 29) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2485.159047] syz-executor.0: attempt to access beyond end of device [ 2485.159047] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2485.160875] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r2, r1) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x20, 0xce, 0x8, 0xff, 0x0, 0x0, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x69a55ae93b84b913, @perf_config_ext={0x1, 0x6}, 0x10004, 0x4, 0x8, 0x4, 0x41a0, 0xc1, 0x80, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/212, 0xd4}, {&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/178, 0xb2}, {&(0x7f00000007c0)=""/33, 0x21}, {&(0x7f0000000f00)=""/24, 0x18}], 0x5, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2040, 0x102) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000300)=""/239, &(0x7f0000000040)=0xef) sendfile(r3, r0, 0x0, 0xfffffdef) r5 = syz_open_dev$mouse(&(0x7f0000000bc0), 0x80000000, 0xe87e4bbd0cb679ad) recvmsg$unix(r5, &(0x7f0000000b80)={&(0x7f0000000500), 0x6e, &(0x7f0000000a40)=[{&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f0000000c00)=""/60, 0x3c}, {&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/74, 0x4a}, {&(0x7f0000000940)=""/210, 0xd2}], 0x9, &(0x7f0000000b00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x10140) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x9, 0x1, 0x40, 0x0, 0x3, 0x821, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0x4, 0x218}, 0x420, 0x1ff, 0x4, 0x7, 0x100000000, 0x8, 0x400, 0x0, 0x81, 0x0, 0x9}, 0x0, 0x7, r6, 0x0) 13:36:43 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1802, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 21) 13:36:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25) [ 2485.297930] FAULT_INJECTION: forcing a failure. [ 2485.297930] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.300013] CPU: 1 PID: 13523 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2485.301272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2485.302602] Call Trace: [ 2485.303033] [ 2485.303419] dump_stack_lvl+0x8f/0xb7 [ 2485.304080] should_fail_ex.cold+0x5/0xa [ 2485.304796] ? __kernfs_new_node+0xd4/0x8c0 [ 2485.305513] should_failslab+0x9/0x20 [ 2485.306029] kmem_cache_alloc+0x5a/0x410 [ 2485.306706] __kernfs_new_node+0xd4/0x8c0 [ 2485.307261] ? lock_release+0x3b6/0x750 [ 2485.307796] ? __pfx___kernfs_new_node+0x10/0x10 [ 2485.308412] ? __pfx_lock_release+0x10/0x10 [ 2485.308997] ? up_write+0x1b0/0x520 [ 2485.309497] kernfs_new_node+0x97/0x120 [ 2485.310038] __kernfs_create_file+0x55/0x350 [ 2485.310627] sysfs_add_file_mode_ns+0x21c/0x440 [ 2485.311232] ? __pfx_dev_attr_store+0x10/0x10 [ 2485.311827] internal_create_group+0x322/0xb20 [ 2485.312440] ? __pfx_internal_create_group+0x10/0x10 [ 2485.313116] loop_configure+0xf37/0x1a00 [ 2485.313800] lo_ioctl+0x93a/0x1990 [ 2485.314317] ? __pfx_lo_ioctl+0x10/0x10 [ 2485.314956] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2485.315694] ? __pfx_perf_tp_event+0x10/0x10 [ 2485.316335] ? __lock_acquire+0xbad/0x5e70 [ 2485.316946] ? trace_rcu_dyntick+0x1a7/0x250 [ 2485.317634] ? __pfx_lock_release+0x10/0x10 [ 2485.318262] ? __pfx_lo_ioctl+0x10/0x10 [ 2485.318843] blkdev_ioctl+0x350/0xa00 [ 2485.319400] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2485.320023] ? selinux_file_ioctl+0xb5/0x260 [ 2485.320676] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2485.321294] __x64_sys_ioctl+0x19e/0x210 [ 2485.321888] do_syscall_64+0x3f/0x90 [ 2485.322447] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2485.323163] RIP: 0033:0x7f85cf83d8d7 [ 2485.323686] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2485.326047] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2485.327031] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2485.327896] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2485.328764] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2485.329627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2485.330516] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2485.331420] 13:36:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) [ 2485.361076] loop2: detected capacity change from 0 to 256 [ 2485.399218] loop4: detected capacity change from 0 to 40 [ 2485.447692] loop6: detected capacity change from 0 to 40 [ 2485.546668] loop0: detected capacity change from 0 to 40 [ 2485.574170] loop7: detected capacity change from 0 to 40 13:36:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 30) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2485.662235] FAULT_INJECTION: forcing a failure. [ 2485.662235] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.663978] CPU: 0 PID: 13533 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2485.665000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 13:36:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2485.666016] Call Trace: [ 2485.666505] [ 2485.666814] dump_stack_lvl+0x8f/0xb7 [ 2485.667337] should_fail_ex.cold+0x5/0xa [ 2485.667894] should_failslab+0x9/0x20 [ 2485.668405] __kmem_cache_alloc_node+0x5b/0x400 [ 2485.669021] ? iter_file_splice_write+0x169/0xcb0 [ 2485.669659] ? iter_file_splice_write+0x169/0xcb0 [ 2485.670323] __kmalloc+0x46/0xc0 [ 2485.670787] iter_file_splice_write+0x169/0xcb0 [ 2485.671394] ? generic_file_read_iter+0x330/0x550 [ 2485.672040] ? generic_file_splice_read+0x1bc/0x4d0 [ 2485.672697] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2485.673354] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2485.674043] ? inode_security+0x105/0x140 [ 2485.674606] ? security_file_permission+0xb5/0xe0 [ 2485.675264] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2485.675950] direct_splice_actor+0x113/0x180 [ 2485.676539] splice_direct_to_actor+0x33a/0x8c0 [ 2485.677162] ? __pfx_direct_splice_actor+0x10/0x10 [ 2485.677835] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2485.678523] ? security_file_permission+0xb5/0xe0 [ 2485.679172] do_splice_direct+0x1bc/0x290 [ 2485.679734] ? __pfx_do_splice_direct+0x10/0x10 [ 2485.680382] ? lock_is_held_type+0xdb/0x130 [ 2485.680999] do_sendfile+0xb1d/0x1280 [ 2485.681550] ? __pfx_do_sendfile+0x10/0x10 [ 2485.682170] __x64_sys_sendfile64+0x248/0x2a0 [ 2485.682779] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2485.683450] ? syscall_enter_from_user_mode+0x21/0x50 [ 2485.684129] ? syscall_enter_from_user_mode+0x21/0x50 [ 2485.684815] do_syscall_64+0x3f/0x90 [ 2485.685315] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2485.685990] RIP: 0033:0x7f0eb6263b19 [ 2485.686498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2485.688771] RSP: 002b:00007f0eb37d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2485.689748] RAX: ffffffffffffffda RBX: 00007f0eb6376f60 RCX: 00007f0eb6263b19 [ 2485.690671] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2485.691573] RBP: 00007f0eb37d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2485.692479] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2485.693400] R13: 00007ffe15765a5f R14: 00007f0eb37d9300 R15: 0000000000022000 [ 2485.693947] syz-executor.6: attempt to access beyond end of device [ 2485.693947] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2485.694366] [ 2485.697063] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2485.732305] FAULT_INJECTION: forcing a failure. [ 2485.732305] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.734165] CPU: 0 PID: 13535 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2485.735216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2485.736250] Call Trace: [ 2485.736598] [ 2485.736908] dump_stack_lvl+0x8f/0xb7 [ 2485.737424] should_fail_ex.cold+0x5/0xa [ 2485.737988] should_failslab+0x9/0x20 [ 2485.738515] __kmem_cache_alloc_node+0x5b/0x400 [ 2485.739142] ? iter_file_splice_write+0x169/0xcb0 [ 2485.739787] ? iter_file_splice_write+0x169/0xcb0 [ 2485.740431] __kmalloc+0x46/0xc0 [ 2485.740906] iter_file_splice_write+0x169/0xcb0 [ 2485.741531] ? generic_file_read_iter+0x330/0x550 [ 2485.742211] ? generic_file_splice_read+0x1bc/0x4d0 [ 2485.742872] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2485.743555] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2485.744265] ? inode_security+0x105/0x140 [ 2485.744843] ? security_file_permission+0xb5/0xe0 [ 2485.745487] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2485.746184] direct_splice_actor+0x113/0x180 [ 2485.746786] splice_direct_to_actor+0x33a/0x8c0 [ 2485.747414] ? __pfx_direct_splice_actor+0x10/0x10 [ 2485.748074] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2485.748731] ? security_file_permission+0xb5/0xe0 [ 2485.749390] do_splice_direct+0x1bc/0x290 [ 2485.749947] ? __pfx_do_splice_direct+0x10/0x10 [ 2485.750602] ? lock_is_held_type+0xdb/0x130 [ 2485.751202] do_sendfile+0xb1d/0x1280 [ 2485.751741] ? __pfx_do_sendfile+0x10/0x10 [ 2485.752333] __x64_sys_sendfile64+0x248/0x2a0 [ 2485.752930] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2485.753585] ? syscall_enter_from_user_mode+0x21/0x50 [ 2485.754277] ? syscall_enter_from_user_mode+0x21/0x50 [ 2485.754964] do_syscall_64+0x3f/0x90 [ 2485.755472] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2485.756143] RIP: 0033:0x7ff3421b2b19 [ 2485.756640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2485.758920] RSP: 002b:00007ff33f728188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2485.759892] RAX: ffffffffffffffda RBX: 00007ff3422c5f60 RCX: 00007ff3421b2b19 [ 2485.760802] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 13:36:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26) [ 2485.761706] RBP: 00007ff33f7281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2485.762800] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2485.763683] R13: 00007ffdc5754e3f R14: 00007ff33f728300 R15: 0000000000022000 [ 2485.764599] [ 2485.776302] loop5: detected capacity change from 0 to 40 [ 2485.808575] FAT-fs (loop1): bogus number of reserved sectors [ 2485.809369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2485.864422] loop2: detected capacity change from 0 to 256 [ 2485.951156] loop6: detected capacity change from 0 to 40 [ 2486.275844] syz-executor.6: attempt to access beyond end of device [ 2486.275844] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2486.277721] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 13:36:59 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2500.854799] loop7: detected capacity change from 0 to 40 13:36:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 22) 13:36:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 31) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:36:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27) 13:36:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x1c, 0x16, 0x15, 0x1a, 0x6, 0x9, 0x1, 0x104, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$binfmt_aout(r3, &(0x7f0000000ac0)={{0x107, 0x1f, 0x6, 0x147, 0x1f6, 0x6, 0x178}, "24d6115d8d04fa900340f129bc55cf6fad4ab411e0e9c7196f466e48de40d49326e7644ea3aedf6a3135d81c213eff654d90d805c1c349126b37e9489549df1b33e191e1738f265497ea85e000101f12689d4b784abcef2e9c6aae80e996fa7411a7285915a93db254d6a198d7fb051702bb160ecdc7ab9a3090a00f88a23d1d8f26104618e05bfd2bcc4d3d58f879172c73aabd3badb14d22939b9bbe2dfd97eca424f6bae6479779d8b036d774", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5ce) preadv2(r4, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f00000006c0)=""/129, 0x81}, {&(0x7f0000000780)=""/249, 0xf9}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000980)=""/91, 0x5b}], 0x9, 0x3, 0x1, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) pwrite64(r0, &(0x7f0000000300)="8868a6baa4f5499b9e117fae18d633a98d23fb4dc27efa265ee938092eeaf4f11f5e31dc4ff168a322971fce9b9d7f0ff05ba90a632f655de7303e7144b8744065771fb6bfe06f3cc15fc5c017672de0b780dbed0f5122cb7f580fba47d418f13350558cf7f8f847a9be7f5966ad4b99167295d5044694f1f76e325dc8411f120f854f677accdbcb510e7bc807de1657ca12925ff587a14c6c6e7ab083e99a6d49beca9b17ef1931c5f7724768a163a8661438eb3052d363cb003fcc2de194241dfc5439e62b0fe7f37fc5c693d157aa53167f0188fbb7a8cd816d972f9859a807", 0xe1, 0x20) [ 2500.877146] FAULT_INJECTION: forcing a failure. [ 2500.877146] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.878142] CPU: 1 PID: 13562 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2500.878716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.879255] Call Trace: [ 2500.879436] [ 2500.879600] dump_stack_lvl+0x8f/0xb7 [ 2500.879874] should_fail_ex.cold+0x5/0xa [ 2500.880172] ? __kernfs_new_node+0xd4/0x8c0 [ 2500.880497] should_failslab+0x9/0x20 [ 2500.880774] kmem_cache_alloc+0x5a/0x410 [ 2500.881078] __kernfs_new_node+0xd4/0x8c0 [ 2500.881384] ? lock_release+0x3b6/0x750 [ 2500.881686] ? __pfx___kernfs_new_node+0x10/0x10 [ 2500.882027] ? __pfx_lock_release+0x10/0x10 [ 2500.882349] ? up_write+0x1b0/0x520 [ 2500.882628] kernfs_new_node+0x97/0x120 [ 2500.882912] __kernfs_create_file+0x55/0x350 [ 2500.883220] sysfs_add_file_mode_ns+0x21c/0x440 [ 2500.883560] ? __pfx_dev_attr_store+0x10/0x10 [ 2500.883881] internal_create_group+0x322/0xb20 [ 2500.884209] ? __pfx_internal_create_group+0x10/0x10 [ 2500.884575] loop_configure+0xf37/0x1a00 [ 2500.884874] lo_ioctl+0x93a/0x1990 [ 2500.885136] ? __pfx_lo_ioctl+0x10/0x10 [ 2500.885425] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2500.885792] ? __pfx_perf_tp_event+0x10/0x10 [ 2500.886116] ? __lock_acquire+0xbad/0x5e70 [ 2500.886426] ? trace_rcu_dyntick+0x1a7/0x250 [ 2500.886778] ? __pfx_lock_release+0x10/0x10 [ 2500.887110] ? __pfx_lo_ioctl+0x10/0x10 [ 2500.887396] blkdev_ioctl+0x350/0xa00 [ 2500.887693] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2500.888013] ? selinux_file_ioctl+0xb5/0x260 [ 2500.888348] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2500.888674] __x64_sys_ioctl+0x19e/0x210 [ 2500.889009] do_syscall_64+0x3f/0x90 [ 2500.889288] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2500.889665] RIP: 0033:0x7f85cf83d8d7 [ 2500.889867] loop6: detected capacity change from 0 to 40 [ 2500.889932] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.891943] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2500.892452] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2500.892945] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2500.893420] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2500.893899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2500.894378] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2500.894894] [ 2500.895877] loop0: detected capacity change from 0 to 40 [ 2500.939140] loop4: detected capacity change from 0 to 40 13:36:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2500.971307] loop2: detected capacity change from 0 to 256 [ 2501.008935] loop1: detected capacity change from 0 to 40 [ 2501.016107] FAT-fs (loop1): bogus number of reserved sectors [ 2501.017204] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2501.052957] syz-executor.4: attempt to access beyond end of device [ 2501.052957] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.054092] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2501.075224] syz-executor.7: attempt to access beyond end of device [ 2501.075224] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.076325] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2501.090319] syz-executor.0: attempt to access beyond end of device [ 2501.090319] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.091658] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:36:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 32) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2501.158979] syz-executor.6: attempt to access beyond end of device [ 2501.158979] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.160032] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:36:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) openat(r0, &(0x7f0000000000)='./file1\x00', 0x309140, 0xb8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:36:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 23) [ 2501.263338] loop2: detected capacity change from 0 to 256 13:36:59 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x80fe, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:36:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) 13:36:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28) [ 2501.375573] loop0: detected capacity change from 0 to 40 [ 2501.393214] loop7: detected capacity change from 0 to 40 [ 2501.396132] loop4: detected capacity change from 0 to 40 [ 2501.400195] loop6: detected capacity change from 0 to 40 [ 2501.520712] syz-executor.6: attempt to access beyond end of device [ 2501.520712] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.521891] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2501.769982] syz-executor.7: attempt to access beyond end of device [ 2501.769982] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.771325] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2501.803883] syz-executor.4: attempt to access beyond end of device [ 2501.803883] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.805170] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2501.836891] syz-executor.0: attempt to access beyond end of device [ 2501.836891] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2501.838673] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2514.095235] loop6: detected capacity change from 0 to 40 13:37:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 33) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:12 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xc0fe, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:37:12 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x405, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) 13:37:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24) 13:37:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 24) 13:37:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29) [ 2514.149782] FAULT_INJECTION: forcing a failure. [ 2514.149782] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.150802] CPU: 1 PID: 13605 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2514.151355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.151910] Call Trace: [ 2514.152095] [ 2514.152259] dump_stack_lvl+0x8f/0xb7 [ 2514.152542] should_fail_ex.cold+0x5/0xa [ 2514.152846] ? __kernfs_new_node+0xd4/0x8c0 [ 2514.153151] should_failslab+0x9/0x20 [ 2514.153425] kmem_cache_alloc+0x5a/0x410 [ 2514.153716] __kernfs_new_node+0xd4/0x8c0 [ 2514.154013] ? lock_release+0x3b6/0x750 [ 2514.154298] ? __pfx___kernfs_new_node+0x10/0x10 [ 2514.154656] ? __pfx_lock_release+0x10/0x10 [ 2514.154977] ? up_write+0x1b0/0x520 [ 2514.155256] kernfs_new_node+0x97/0x120 [ 2514.155554] __kernfs_create_file+0x55/0x350 [ 2514.155872] sysfs_add_file_mode_ns+0x21c/0x440 [ 2514.156215] ? __pfx_dev_attr_store+0x10/0x10 [ 2514.156542] internal_create_group+0x322/0xb20 [ 2514.156877] ? __pfx_internal_create_group+0x10/0x10 [ 2514.157259] loop_configure+0xf37/0x1a00 [ 2514.157566] lo_ioctl+0x93a/0x1990 [ 2514.157831] ? __pfx_lo_ioctl+0x10/0x10 [ 2514.158113] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2514.158475] ? __pfx_perf_tp_event+0x10/0x10 [ 2514.158806] ? __lock_acquire+0xbad/0x5e70 [ 2514.159132] ? trace_rcu_dyntick+0x1a7/0x250 [ 2514.159498] ? __pfx_lock_release+0x10/0x10 [ 2514.159824] ? __pfx_lo_ioctl+0x10/0x10 [ 2514.160125] blkdev_ioctl+0x350/0xa00 [ 2514.160410] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2514.160735] ? selinux_file_ioctl+0xb5/0x260 [ 2514.161078] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2514.161413] __x64_sys_ioctl+0x19e/0x210 [ 2514.161723] do_syscall_64+0x3f/0x90 [ 2514.162001] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2514.162373] RIP: 0033:0x7f85cf83d8d7 [ 2514.162668] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.163945] RSP: 002b:00007f85ccdb2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2514.164498] RAX: ffffffffffffffda RBX: 00007f85cf887970 RCX: 00007f85cf83d8d7 [ 2514.165003] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 2514.165492] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 2514.165999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2514.166480] R13: 0000000000000006 R14: 0000000020001f30 R15: 0000000000000002 [ 2514.167025] [ 2514.177823] loop7: detected capacity change from 0 to 40 [ 2514.178925] loop4: detected capacity change from 0 to 40 [ 2514.190092] loop1: detected capacity change from 0 to 40 [ 2514.200889] loop0: detected capacity change from 0 to 40 [ 2514.226621] FAT-fs (loop1): bogus number of reserved sectors [ 2514.227746] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2514.240102] loop2: detected capacity change from 0 to 256 [ 2514.242619] syz-executor.4: attempt to access beyond end of device [ 2514.242619] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.243565] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2514.249887] syz-executor.6: attempt to access beyond end of device [ 2514.249887] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.251032] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:37:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) 13:37:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 34) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) recvmmsg$unix(r3, &(0x7f0000002bc0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000300)=""/131, 0x83}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000540)=""/236, 0xec}, {&(0x7f00000001c0)=""/44, 0x2c}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000940)=""/44, 0x2c}, {&(0x7f0000000980)}], 0x5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000006e3ee86744e0eb1f8863615a9b464ac6aa25b2c8d958f291b2832f4991c867cd45269fa39aa61591008bb50adfd3fc745cdc044e84d0a36c14ffd260292d3a710b1ffacf37d60dd33dbe638218355fa7d22590b9cb0583df12de2cbbd59501a79fb9fda6d7e66edbe166aea9c5c161c610a52ae0425f530bc851dfbbd3b2b917f491b61ef16ed382b69a1adbcfadd5608bfce402737dfe428055a90f1213c54e7d3f33a6"], 0xb0}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/128, 0x80}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x2, &(0x7f0000000d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e80)=""/73, 0x49}], 0x2, &(0x7f0000000f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001100)=""/187, 0xbb}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/219, 0xdb}, {&(0x7f00000022c0)=""/23, 0x17}], 0x4, &(0x7f0000002340)}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002680)=""/188, 0xbc}, {&(0x7f0000002740)=""/96, 0x60}, {&(0x7f00000027c0)=""/161, 0xa1}, {&(0x7f0000002880)=""/118, 0x76}, {&(0x7f0000002900)=""/220, 0xdc}, {&(0x7f0000002a00)=""/195, 0xc3}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000002340)}], 0x9}}], 0x7, 0x140, &(0x7f0000002500)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2514.568277] loop4: detected capacity change from 0 to 40 [ 2514.581852] syz-executor.0: attempt to access beyond end of device [ 2514.581852] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.582776] loop2: detected capacity change from 0 to 256 [ 2514.583694] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2514.631055] syz-executor.7: attempt to access beyond end of device [ 2514.631055] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.632900] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2514.652859] syz-executor.4: attempt to access beyond end of device [ 2514.652859] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.654311] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:37:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xe300, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2514.693889] syz-executor.4: attempt to access beyond end of device [ 2514.693889] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2514.695388] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:37:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 35) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25) [ 2514.846713] loop2: detected capacity change from 0 to 256 [ 2514.971349] loop0: detected capacity change from 0 to 40 [ 2515.242283] syz-executor.0: attempt to access beyond end of device [ 2515.242283] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.244271] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26) 13:37:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x10) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 25) 13:37:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 36) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:29 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfc00, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2530.541658] loop0: detected capacity change from 0 to 40 [ 2530.544159] loop4: detected capacity change from 0 to 40 [ 2530.554244] loop6: detected capacity change from 0 to 40 [ 2530.578840] loop2: detected capacity change from 0 to 256 [ 2530.604773] syz-executor.4: attempt to access beyond end of device [ 2530.604773] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2530.605886] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2530.612857] loop7: detected capacity change from 0 to 40 [ 2530.614240] loop1: detected capacity change from 0 to 40 [ 2530.617679] FAT-fs (loop1): bogus number of reserved sectors [ 2530.618106] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendfile(r2, r0, &(0x7f0000000040)=0xffffffffffff7fff, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2530.790233] syz-executor.0: attempt to access beyond end of device [ 2530.790233] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2530.791354] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 37) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2530.835259] syz-executor.6: attempt to access beyond end of device [ 2530.835259] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2530.836701] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:37:29 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfe80, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2530.915206] syz-executor.7: attempt to access beyond end of device [ 2530.915206] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2530.917883] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2530.922171] loop2: detected capacity change from 0 to 256 [ 2530.923046] FAULT_INJECTION: forcing a failure. [ 2530.923046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2530.923710] loop4: detected capacity change from 0 to 40 [ 2530.924052] CPU: 1 PID: 13669 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2530.925265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.925808] Call Trace: [ 2530.925998] [ 2530.926158] dump_stack_lvl+0x8f/0xb7 [ 2530.926445] should_fail_ex.cold+0x5/0xa [ 2530.926745] _copy_to_user+0x30/0x1c0 [ 2530.927037] lo_ioctl+0x894/0x1990 [ 2530.927306] ? __pfx_lo_ioctl+0x10/0x10 [ 2530.927614] ? lockdep_hardirqs_on+0x7d/0x100 [ 2530.927950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2530.928349] ? blkdev_common_ioctl+0xe2/0x1ac0 [ 2530.928683] ? write_comp_data+0x12/0x90 [ 2530.928973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2530.929355] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2530.929684] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2530.930050] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2530.930475] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2530.930904] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2530.931301] ? selinux_file_ioctl+0x5c/0x260 [ 2530.931615] ? __pfx_lo_ioctl+0x10/0x10 [ 2530.931912] blkdev_ioctl+0x350/0xa00 [ 2530.932203] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2530.932521] ? selinux_file_ioctl+0xb5/0x260 [ 2530.932857] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2530.933176] __x64_sys_ioctl+0x19e/0x210 [ 2530.933485] do_syscall_64+0x3f/0x90 [ 2530.933746] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2530.934113] RIP: 0033:0x7f85cf83d8d7 [ 2530.934368] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.935637] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2530.936146] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2530.936617] RDX: 00007f85ccdb3050 RSI: 0000000000004c05 RDI: 0000000000000007 [ 2530.937123] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.937618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85ccdb3050 [ 2530.938124] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2530.938633] 13:37:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27) 13:37:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 26) [ 2531.108480] loop7: detected capacity change from 0 to 40 [ 2531.121292] loop6: detected capacity change from 0 to 40 [ 2531.171155] syz-executor.7: attempt to access beyond end of device [ 2531.171155] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.172290] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2531.178433] loop0: detected capacity change from 0 to 40 13:37:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 27) 13:37:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 38) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:29 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfec0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2531.368085] loop2: detected capacity change from 0 to 256 [ 2531.375512] FAULT_INJECTION: forcing a failure. [ 2531.375512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2531.376705] CPU: 1 PID: 13685 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2531.377245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2531.377784] Call Trace: [ 2531.377961] [ 2531.378122] dump_stack_lvl+0x8f/0xb7 [ 2531.378188] loop7: detected capacity change from 0 to 40 [ 2531.378394] should_fail_ex.cold+0x5/0xa [ 2531.379519] _copy_from_user+0x30/0x1f0 [ 2531.379808] lo_ioctl+0x6e9/0x1990 [ 2531.380073] ? __pfx_lo_ioctl+0x10/0x10 [ 2531.380357] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2531.380719] ? __pfx_perf_tp_event+0x10/0x10 [ 2531.381040] ? __lock_acquire+0xbad/0x5e70 [ 2531.381357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2531.381722] ? do_vfs_ioctl+0x137/0x1af0 [ 2531.382009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2531.382372] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2531.382708] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2531.383093] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2531.383511] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2531.383944] ? __pfx_lock_release+0x10/0x10 [ 2531.384252] ? __pfx_lo_ioctl+0x10/0x10 [ 2531.384532] blkdev_ioctl+0x350/0xa00 [ 2531.384814] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2531.385118] ? selinux_file_ioctl+0xb5/0x260 [ 2531.385432] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2531.385749] __x64_sys_ioctl+0x19e/0x210 [ 2531.386039] do_syscall_64+0x3f/0x90 [ 2531.386301] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2531.386656] RIP: 0033:0x7f85cf83d8d7 [ 2531.386923] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.388192] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2531.388769] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2531.389276] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2531.389770] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2531.390281] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2531.390789] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2531.391310] [ 2531.395309] syz-executor.0: attempt to access beyond end of device [ 2531.395309] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.396383] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2531.441063] syz-executor.4: attempt to access beyond end of device [ 2531.441063] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.443326] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:37:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28) [ 2531.515282] syz-executor.6: attempt to access beyond end of device [ 2531.515282] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.516792] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2531.533792] syz-executor.4: attempt to access beyond end of device [ 2531.533792] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.535045] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:37:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2531.554319] loop0: detected capacity change from 0 to 40 13:37:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 39) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2531.595226] syz-executor.7: attempt to access beyond end of device [ 2531.595226] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2531.596256] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2531.604890] loop1: detected capacity change from 0 to 40 [ 2531.615045] FAT-fs (loop1): bogus number of reserved sectors [ 2531.615495] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 28) [ 2531.705536] FAT-fs (loop5): bogus number of reserved sectors [ 2531.706131] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2531.737326] loop2: detected capacity change from 0 to 256 [ 2531.750057] FAULT_INJECTION: forcing a failure. [ 2531.750057] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.751699] CPU: 0 PID: 13701 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2531.752481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2531.753255] Call Trace: [ 2531.753511] [ 2531.753735] dump_stack_lvl+0x8f/0xb7 [ 2531.754125] should_fail_ex.cold+0x5/0xa [ 2531.754548] should_failslab+0x9/0x20 [ 2531.754947] __kmem_cache_alloc_node+0x5b/0x400 [ 2531.755408] ? bdev_disk_changed+0x319/0xf50 [ 2531.755849] ? __pfx_blk_drop_partitions+0x10/0x10 [ 2531.756329] ? filemap_check_errors+0xa9/0x160 [ 2531.756787] kmalloc_trace+0x26/0x60 [ 2531.757164] bdev_disk_changed+0x319/0xf50 [ 2531.757589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2531.758115] ? mark_lock.part.0+0xef/0x2f70 [ 2531.758554] loop_reread_partitions+0x68/0xd0 [ 2531.759015] loop_set_status+0x4b8/0x860 [ 2531.759430] lo_ioctl+0x70f/0x1990 [ 2531.759801] ? __pfx_lo_ioctl+0x10/0x10 [ 2531.760239] ? perf_trace_preemptirq_template+0x272/0x410 [ 2531.760787] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2531.761307] ? do_vfs_ioctl+0x137/0x1af0 [ 2531.761711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2531.762231] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2531.762707] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2531.763212] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2531.763784] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2531.764386] ? __pfx_lock_release+0x10/0x10 [ 2531.764829] ? __pfx_lo_ioctl+0x10/0x10 [ 2531.765238] blkdev_ioctl+0x350/0xa00 [ 2531.765632] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2531.766066] ? selinux_file_ioctl+0xb5/0x260 [ 2531.766517] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2531.766958] __x64_sys_ioctl+0x19e/0x210 [ 2531.767366] do_syscall_64+0x3f/0x90 [ 2531.767746] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2531.768260] RIP: 0033:0x7f85cf83d8d7 [ 2531.768626] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.770301] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2531.771030] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2531.771703] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2531.772376] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2531.773042] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2531.773710] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2531.774397] [ 2531.796413] loop7: detected capacity change from 0 to 40 13:37:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='befs\x00', 0x100000c, &(0x7f0000000340)='vfat\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r2, r4, &(0x7f0000000180)=0xfffffffffffffff8, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:43 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xff00, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:37:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2808419, &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="18627e2259628f164dbf03b72c0ac8525af2af826febb756f0061566a7f03d0a0b4b106f3175f3194d94a26b68d0e9cfb23849e39a1c0d84323df188534c7d688106087cc7ec7e29dc0c5dc07f37be4e3b91116c0a3af4cb832e9343265ccc502217065398d5f46dd095931a725dd5890d03cb13ebfbb2e77fe6903541680bbda236b194da2e0183d923dbf889dad423c6d6ac2f35817c3da5ab172ce783ba"]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$iso9660(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x4, 0x6, &(0x7f00000008c0)=[{&(0x7f00000006c0), 0x0, 0x8}, {&(0x7f0000000700)="10e8036c830084176d8a11b7f604de48acb4", 0x12}, {&(0x7f0000000740)="7caa7a2b2e35de1aee9ca6ea4c6fd992fba8ca15b72d3976715d", 0x1a}, {&(0x7f0000000780)="1d06e49d6e01fca0fa47d3539a31a5652db0778d637a26ee3e16bd6cf2e20b8647ff8d4e", 0x24, 0x1a3}, {&(0x7f00000007c0)="b020fc5f6ae314f0aaced83abb78776ae584b38450b1d024c611610413242eeec63335b497f7287b78915b760ad0e7fc9b927661341f3d7155644c1d0c9f735207d91d24f4d26904e3ca07445d0cd9ea8d5475f2050784c8dda5fcbd6c7afa41d5c8a4815acf4a838d7a6409efa4dbf877f326db94bf98260d071d888559b50d37a0735dea26", 0x86}, {&(0x7f0000000880)="a9a8ef512805204a34f148175eb3f7fc1579c5755c57", 0x16, 0x8}], 0x114000c, &(0x7f0000000ac0)=ANY=[@ANYBLOB='sbsector=0x00000000000001a3,map=off,iocharset=cp866,map=off,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c6d61736b3d5e4d41595f455845432c66736e616d653d2f6465762f7663736123002c00d39b1f539608399d884a8b58c4eae262568fc422bc1bb53f7aa0eb0c4a0190dab811c25375328fccdb1cbb0ced59838011f6a59345c14cf025174b22868acfae7c4af6d4245f2c55db43b3b866308f3f201e05b6f836e74bf7455e2009ef2ba080594293bdd7e1a69870e345547de18679b8f7e4992f054a8b1b34b7cb9bf7040000005cc2bca8fca6cc197c7f7c9dd36bee096bbc04b373cfbf398a08"]) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3c, &(0x7f0000000080), 0x4) r2 = accept4(r1, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r6 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x603, 0xffffffffffffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x6, 0x20000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x41) sendfile(r5, r4, 0x0, 0xfffffdef) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000480)={0x8455, {{0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1f, 0x0}, 0x2}}, {{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3e}}}, 0x108) r9 = getpid() perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x0, 0x79, 0xff, 0x9, 0x0, 0x3f, 0x49000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe8, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x200}, 0x80, 0x0, 0x7fffffff, 0x9, 0x1, 0x2, 0x3, 0x0, 0x3bc, 0x0, 0x2}, r9, 0x9, r6, 0x0) 13:37:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29) 13:37:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 40) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 29) [ 2544.888781] loop4: detected capacity change from 0 to 40 [ 2544.893229] loop6: detected capacity change from 0 to 40 [ 2544.899271] FAT-fs (loop5): bogus number of reserved sectors [ 2544.899418] loop0: detected capacity change from 0 to 40 [ 2544.899873] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2544.904091] loop1: detected capacity change from 0 to 40 [ 2544.922526] loop4: detected capacity change from 0 to 1 [ 2544.924569] FAT-fs (loop1): bogus number of reserved sectors [ 2544.925374] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2544.930872] loop2: detected capacity change from 0 to 256 [ 2544.959980] loop7: detected capacity change from 0 to 40 [ 2545.012374] loop4: detected capacity change from 0 to 40 [ 2545.050146] loop4: detected capacity change from 0 to 1 13:37:43 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2545.268929] bio_check_eod: 2 callbacks suppressed [ 2545.268954] syz-executor.0: attempt to access beyond end of device [ 2545.268954] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2545.271761] buffer_io_error: 2 callbacks suppressed [ 2545.271779] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2545.335981] syz-executor.6: attempt to access beyond end of device [ 2545.335981] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2545.337976] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2545.361101] syz-executor.7: attempt to access beyond end of device [ 2545.361101] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2545.363001] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2545.442371] syz-executor.6: attempt to access beyond end of device [ 2545.442371] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2545.444385] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:37:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 41) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) 13:37:57 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000001400)='./file1\x00', 0x200, 0x102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000013c0), 0x7}, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x884}, 0x0, 0x0, r1, 0x0) r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r4, r3) r5 = open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x8000) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000300)={{r5}, "404917ebcbe64751597b2bda4503ce7768077f08628237d89bd2cc8f1e5e7c1a35c5bf218caf88fa10b7ad4027a9d3914fb2a378e429da9521acf0ddd283cece630688401d1abb8842e703f0eafba15bbb9ec945009d77d8738d6a5a7eb53708bb56c5ece56c59bb7e9007975ea4ff1f85be7b6529a7987d8530f6b343c3123a437190f733697768df99daafcfbd83573f242bc62acc1ec7f458cc55334baa42e31fae0c1689abf14e29342499017f38bfd135f7efceebadcc54229b37184aae7e6bbdab60e4bca7c7af75adaf3f74eda8b9ca6ddf9b78968d83d6a9f10dfac4aa029dee1ed09128d2565aa15b13b4d366862545fd15e7cf4165a4957323dd350446cc2315de4d5395ccc2a9c3459d684c7a0ba89f6d167c6531fd79b9c9f1ead6d9c2d1f241ef9398a15859fc9ce490b27d1d6f77a21ce68fe9585c524348adcda403b4d1f773ed94fcaf6551af95fe1bb78acdd04b447d75a6e33abe045377dde24a4054defb787ab34b6b94567266bfc4338f686589529929b2f9b410f6387125abed031e0e127122bcde7219293ce84a3b488762eba9e74aeb6640a1367b27d0962073d6a69bfd6ad1309f3a4bea6bd4adca278566720c2327495de22a61f1eae93dafc1cb03c5f64119498a23173c165ccd105b3ba7403c0b40325503051937bb7eb2f06d485977d48e3568b6a85fca44b7174206c7ed9b4b8443475e22b58c6471ab14d6aa186eb7375243be2a92704604fc5efb153d2b47fd5e85391acd6c59467f1a9d96d7e168c29990b5588eb508cd85caf7dcc6136c7eaebd9c45abcf05a0f94a6be4e337df46fb182ae931c3ecbbb0c8b95a4d57c1be13b725d64832a356b4179c9df8a081283d8c7bbc7f5cebadc38cb7964b46426aca1171a82b7ee6bf3ef0609909466adaa287a245ea159e9016ddb430bf62ff8e6240e78c43708b586343ea2e91eb3ad661e1fdf219f11697bdebaf192968c44fe6d642064130c192378041e40214bb86ee5d01b0206c5013e4483e5034bbaa84dd5bc56789cd0e8f3787c41b401bebdafeb5ad432945fde54ad0b762a126cc07dadfab99c80ed65b40c33455f021c0e486c2801ef4eb84543f97c1a2fe3b0aef4f9cf13c964f1ca7e9b905c2c4b3d8f73dd273e1d398d939e2f7b02b19ad8a5acf94555f5a2ba3279d17f2ca3321b4c891639003ccd11502b5e11aac4987cd5369d84e2f2ffee7029afd1b4e260f008404b01f725153db42c4ca9401cef61a3af22f775195412edeeeb21f4f37a3a03f06aea1242649ed5d615bd7ef8262a3bc1deb3570eaeec96f8789cb482d6ec8503df83f0344ce3e5ba3a8c05fd47526f9dab459dad463326a75b86329cd74d459a6593c01cb74bf2af8c0d3da0eb50d6f96e49573d5cc595432f35ab072f09a1c9d0698adb1c41696f12231ac652c812b7c3430d513c06571bcf06cb5cc73566b4125c9176e75d9fee1a7364179176b1dc6b1247108de2834150a9a86983f54537972b42e53f21c2c03246046ffd0f40b4d41d88c198f168c294f3f0aa2ed3cbfc3863cb5299fe2bb6aa4dee0657ea5f810f086468f3142c0178c8b321a01be1f962803e09f7602e3609613597a6e0d5e0a3dcbecdeaa9a5a5c61606be337b8b3cba88705069d0eb3a8e68fe662a4214ffca3f44df42be9e7a8cc40ba2662a89fd547d46734d7a97a3741e3189fee2ddb0763ce8835e725f2734045b900559e64865570d837c010f5f62d4faf7010de9e6b18016780b134fe1a585adc21798fb0f7392a8088745c7032e6231a12727ffd5d8593db1d3c1d7ad9db50c297a002e20d792649c72a57225c6b0a951d91c33d42832c0a472f08107e228c3855349d597bc76145dd59f10d7c535acf4242c432ae3eda3efb628253b4c73fa161eaaaf2c0fa8402d11774605ce1b1e1306ff5169f6f2004c400fb237f9ef9cf0226632cba900f7a3213858157d82e896e24f00dbb87659a30bb1eec9c6659d80d53654a317d1f9f84b8e47c510d8d7a196d9288472008e231aac5accb9ab1c207176db3b28da6c11e092d9fc8c2798a42f4b51277237704651bd94478538f0a279f73318b27d620db102ae9bd084214af1b909193fda7061a659effa8167c8652114fe54d0c3d27b06e0f955af247dd3fc436ac9c2daa156e52e3e4f9fd2f5188dbc2bdf59c88d8aa5c98c122993b2538bd99dd976754fbadf994cddbc095d809f1eb6a967e85f77f075900d052fc9bee63a4343e103b371137ad2301d704cdbfdd5f623946ec8c0212f87476e574a5cee3162626f1d098c236883151c8967e5486db363c68868e7a9dfedccbb5df73e76e4329dddf0118595b479a8cf25fc7c9c3786a8070b5b88c4ce82110fdad58a8015eb38b0a09382e9b440dcc91172f68552d550e84d5328214662f51aa7b1741ad107da439d335f260ca452b53f5948b01134b3b7b03177a68ff3ada8bac0a7934fe7d6f5714b5cb766a864b1d74254c68ce5b391b03aea4291946e637fcdf2b74604b88425a31539a55b7629bad6e40e7630bf47094deec18cc1b25dd15ce3fb6b6ca21c425bec0cf4e0c0167523b7bd6212033083f8bbbbdef8bfa2b6f06e8e890568298e606a9b30674592b2e1d147d149c6e6991c3ab6ea7df0a25f1163f3fdabce7cc220ac9208cd150c7a80b45d0c524a04c3b97c21959e59c5c5db41017c41dba6873cdbe82ad7dff57ee35a785c8bef13f24df714b69c3eee7c1a20a8ef526a95baeb01b0fa09ce9509e0f4252f31fad100cdb50a3fca1ee7d72479e5d6cccc42f8999327d38e5cd4b797e3da5dacb0eb3b3064978e2221d5add63b87c0fcfd3a01534d398549ca03363ba5edf7f30fb8ef6996daff2bc93d8988d92def0167c41fe345969d6e4e197fa04f7982713d92f04783b813a1e79db25ef62f6fadb2e6c74f9fac65d446eb5e83d6eb3e842f2f7e400ceeab90b14437c01570c67b51eda0e59f159bd97a177b2c21738cede63bfc09775b8496167a1086de24a2ab0c9187e00158f52a1dc39767af202fcd05970a5cc6661e1ae6b8bede0c9dfad5c8bf447e89057e735a5323567a6fb815b9c3f5ff3d518837ecffbf2dc984cb906cf2c7735161e6e6a9bf2b4817f6af02e6d95e7b1c2138317825df56cf2597919107ea9ce12d9d44d6985fcc7ce7a93a8354bbd0337315a039badbe60ec80cfb7aa0fcb0d6190126f147d22a72631e690408859a280bbba65994d8c0bbbbc920a3a05c72434b2bcbe4dab0800e3bf34ff9b52738049c098278e5dae3cb20716cc4cad65f7d806c666716e70b0f1764235563283ef62f90037cf1bbf62726d30579906acb077397104298868c86a2568a1d12189b2830aa0a3cf9e57dd3678845721bdf11432cb70abfc140f495546551e215ef76b19e2aa777ef208b630a8cd1e947e2e659bb46de315bdc768b6ebffe165ca8003a680e2e16015381e50365104f4824609a6db8ddca9fe190659ade9287060f023a4befd788f8c09f4c05a26d8fb8f9fb0d14ee5d3df2a693a3db87d19664b156be86cbe71aac7390cde92974d10a9197c86e4af595a89e266e6b43fc0f7cfef3d58ca540056d61f2d361b578febee3874b12158a3b5385ccf5eafdc401b47e018c73053ab3cc0f2a75e508cf92e25eba6fe81a6667208dbebe18cd3247f00b3ae6fbb28e4c14fd2282c004515d66c665688b696a16b33d51d41f19d2ce68f9f1a5f69f605ddc216fba75b3ce4e3cf56e31b59ef823acaa24e765e8c5d8625352c956de9ea872104723f5021848a9658f1327626192c672f766919eabf15797ffd4f54c0822792bf1e741ea01dbb7324715d6317845913d750561f15b4c4b419bbc1ef3df47db26cfb51845db341ef6006b2f65fdab20607fbf6bd2a8048a05c0511b3fd505fcc0a321aeb15080dae33a6c3cfa163a3df2fdf0860ed338d709cee9409637f554d657bb29fbb0fed6f05055bc734eff20a579f97264ac524d2a0fb873539da00aaa54f28d7c8ecbec415f2f19c7ebd303987c021f1f9c144ec2922d8598441133069c76cb0437d344b0e143f812a3d61e4f7f85a1390859d2f0ee712421c2feef73e91dad4fcd831aeb3d4cd1c2843b0e5c2f9bbdb5ad83656509fa3b4807edfe80654568d2ad90aec1c0e325bd35b58f7d2f5e8818678b70e85baeb33aef634ecc9a2e39a7184c5c229f637c059ea0b8f5a2944dcbf713f4525a77cfd06e722b0f00dc8db763671b5c84b86329b39088dfcc242a6a37f11385b79e85d6ddeccbabc37a3c3dbbfff7606f7ba7f96130e2634c11d1acc7ad38eb1da26a6b10279dcfd80165965e1b6d47942ca22e60d7e6f54bf289bc82b70de92a9c4593fc47cfbfe18f9befe4554c482714a6c08180569e5e207a5f02f38d330fe5eaf0e28856a456652b83f096b5d69af0788b2dfcbf6964f7bac713b4c248866df9482801381112d14b1a27c74d6a3bf096ae6d1684bc69c40b714171f11c67b0421c76404a28c204a47d589fd22fd4e214a1af286bad4e7e129b2aadabe9a8bc95b3f95aa2b20fff62e975ce41d640e7181d419290a090a9381c6571365dd89602dc536ac218b018581c1a241952841016b7f40b1c5ff676b5539fd5ca7e15eb9701c235b0dff3c13632b2e1569298df00f779a45fc3026518e82f1387f74554c7b02bda5cd45a9e0be3788edf8000e3d3d2a0a15502c549f2c0d2996cf8f3b32071663c0ea6ba543864f091ad0e4459f2333f2ca83f7f5d6243f47e6b1ca942547bd67e4109c00ce1caefedd6c79f3ce0013b208b5494ec740eccd7a074cfeb96a07082c307149ef36bb5eaa5129e42d1484758b6b20a9535e76c74e14d12bf44345e67c0d9aee7409a3d3db3504b71883dff89e8b62ad12430919762645d6a7a58b2e23f082409825a7e7f5e8d2da0df398a179a2237a1287b4348bf20577518db1c211679be4df9059f706c739aaa58871761c6f1b46dddf59f7f99135ccf581ea5f29b71a55f4962e43e979b514b98ccb751b2d02e8be99dce23c9b2414c09e05ac860f9e14c0c21348b36276ab16a6650d4dfff789869f2f77cd13a07c0c44254dbb065df52f16637fde5f1b166dce411ff1bcadad4ce7056041754acda30d0100ac87bb9ab8b1e33fbeeca98414bc5acb8e19d1b91a9a96818c8f46a09a80038c8e053560a72c21a2a1f44a16209f77867781f099e5b7622b3d3cfbee3d6dd800718a831a6852a3cb8bd1861c98fd5b4b5061f0a1946438dca60b33636726ac6462e3f1b566524c7577dfd64c5e5a855625b93ffeec0960f40b7e4fb26e8f74ab238bcf372cb503280a2fb20fe1375e190ed804db9bf3a87909cd433ecb6ded7518a890658eb2695719f7df56161074711afd9ffb7fa640090284057e6ff92276a03c2cf91655f6c100a1aa959595b82eb6901a3295871a27ae90ebd7d9dcdd112ed8017c0b4742700df654a1e88c84d612ba6dc94b6813bf26c0bdd48689f19c2cf1f8c01178151aca6b033adc1aa747fcddad0c293ba31cbe3242f5ff1779ff99d4c3b277522383798c9e84dec48a18dcbb5ad58cb555b872312f7c1e36033771e227342034c17cfc21829a11715fa384687f5a3ea7998a7c5566ab635565405bed61bebe4362164820ff02647ad8b419ac32b8f55320c77cc3dd8fb76662b28796032f35a8680b4635627cc6f304ff1743352396a37c513ddc5aa752271edb27a9c778e43fc683ae0e855cc2aa658b017b56a2a898ccdf7d5fce87fca23f97619d3e37"}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000001380)={0x0, 0x5, 0x1}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000001300)='./file1\x00', 0x800, 0x191) sendfile(r2, r1, 0x0, 0xfffffdef) r7 = fsmount(r1, 0x0, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x80, 0xa2, 0x64, 0x9, 0x0, 0x7, 0x10020, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3f, 0x7, @perf_bp={&(0x7f0000000000), 0x2}, 0x42042, 0x5, 0xf9, 0x5, 0x3, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r7, 0x8) 13:37:57 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:37:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x6ad, 0x3, 0x5}) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 30) [ 2559.030743] loop0: detected capacity change from 0 to 40 [ 2559.036092] loop7: detected capacity change from 0 to 40 [ 2559.037515] FAT-fs (loop5): bogus number of reserved sectors [ 2559.038343] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2559.039119] loop4: detected capacity change from 0 to 40 [ 2559.041618] loop1: detected capacity change from 0 to 40 [ 2559.045272] FAT-fs (loop1): bogus number of reserved sectors [ 2559.045746] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2559.117107] loop6: detected capacity change from 0 to 40 [ 2559.122281] loop2: detected capacity change from 0 to 256 [ 2559.125497] syz-executor.4: attempt to access beyond end of device [ 2559.125497] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.126371] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2559.131804] FAULT_INJECTION: forcing a failure. [ 2559.131804] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.132831] CPU: 1 PID: 13771 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2559.133390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.133939] Call Trace: [ 2559.134138] [ 2559.134300] dump_stack_lvl+0x8f/0xb7 [ 2559.134585] should_fail_ex.cold+0x5/0xa [ 2559.134883] should_failslab+0x9/0x20 [ 2559.135166] __kmem_cache_alloc_node+0x5b/0x400 [ 2559.135498] ? __get_vm_area_node+0xea/0x350 [ 2559.135814] ? __stack_depot_save+0x3e/0x4e0 [ 2559.136131] kmalloc_node_trace+0x21/0x60 [ 2559.136432] __get_vm_area_node+0xea/0x350 [ 2559.136739] __vmalloc_node_range+0x252/0x1430 [ 2559.137068] ? bdev_disk_changed+0x334/0xf50 [ 2559.137377] ? lock_acquire+0x1b6/0x530 [ 2559.137675] ? bdev_disk_changed+0x334/0xf50 [ 2559.137988] ? lock_release+0x3b6/0x750 [ 2559.138289] ? __pfx___vmalloc_node_range+0x10/0x10 [ 2559.138648] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.138996] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.139368] ? bdev_disk_changed+0x334/0xf50 [ 2559.139695] __vmalloc_node+0xac/0xf0 [ 2559.139981] ? bdev_disk_changed+0x334/0xf50 [ 2559.140290] bdev_disk_changed+0x334/0xf50 [ 2559.140605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2559.140989] loop_reread_partitions+0x68/0xd0 [ 2559.141321] loop_set_status+0x4b8/0x860 [ 2559.141619] lo_ioctl+0x70f/0x1990 [ 2559.141897] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.142210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.142596] ? do_vfs_ioctl+0x137/0x1af0 [ 2559.142894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.143268] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2559.143616] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2559.143961] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2559.144367] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2559.144813] ? __pfx_lock_release+0x10/0x10 [ 2559.145136] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.145434] blkdev_ioctl+0x350/0xa00 [ 2559.145725] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.146046] ? selinux_file_ioctl+0xb5/0x260 [ 2559.146385] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.146709] __x64_sys_ioctl+0x19e/0x210 [ 2559.147013] do_syscall_64+0x3f/0x90 [ 2559.147302] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2559.147673] RIP: 0033:0x7f85cf83d8d7 [ 2559.147947] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.149203] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2559.149745] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2559.150245] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2559.150743] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.151229] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2559.151731] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2559.152245] [ 2559.152709] syz-executor.2: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 2559.153971] CPU: 1 PID: 13771 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2559.154509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.155046] Call Trace: [ 2559.155247] [ 2559.155405] dump_stack_lvl+0x8f/0xb7 [ 2559.155677] warn_alloc.cold+0x95/0x1a7 [ 2559.155961] ? __pfx_warn_alloc+0x10/0x10 [ 2559.156275] ? __kasan_kmalloc+0x72/0x90 [ 2559.156558] ? __get_vm_area_node+0x277/0x350 [ 2559.156873] __vmalloc_node_range+0xcac/0x1430 [ 2559.157188] ? lock_acquire+0x1b6/0x530 [ 2559.157469] ? bdev_disk_changed+0x334/0xf50 [ 2559.157773] ? lock_release+0x3b6/0x750 [ 2559.158054] ? __pfx___vmalloc_node_range+0x10/0x10 [ 2559.158401] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.158766] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.159137] ? bdev_disk_changed+0x334/0xf50 [ 2559.159447] __vmalloc_node+0xac/0xf0 [ 2559.159742] ? bdev_disk_changed+0x334/0xf50 [ 2559.160069] bdev_disk_changed+0x334/0xf50 [ 2559.160378] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2559.160793] loop_reread_partitions+0x68/0xd0 [ 2559.161137] loop_set_status+0x4b8/0x860 [ 2559.161442] lo_ioctl+0x70f/0x1990 [ 2559.161720] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.162051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.162429] ? do_vfs_ioctl+0x137/0x1af0 [ 2559.162728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.163125] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2559.163483] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2559.163847] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2559.164271] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2559.164729] ? __pfx_lock_release+0x10/0x10 [ 2559.165054] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.165353] blkdev_ioctl+0x350/0xa00 [ 2559.165652] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.165969] ? selinux_file_ioctl+0xb5/0x260 [ 2559.166309] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.166634] __x64_sys_ioctl+0x19e/0x210 [ 2559.166934] do_syscall_64+0x3f/0x90 [ 2559.167244] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2559.167620] RIP: 0033:0x7f85cf83d8d7 [ 2559.167897] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.169126] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2559.169660] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2559.170171] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2559.170680] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.171184] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2559.171698] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2559.172239] [ 2559.173847] Mem-Info: [ 2559.174042] active_anon:73 inactive_anon:43831 isolated_anon:0 [ 2559.174042] active_file:21931 inactive_file:55927 isolated_file:0 [ 2559.174042] unevictable:0 dirty:442 writeback:0 [ 2559.174042] slab_reclaimable:10188 slab_unreclaimable:66908 [ 2559.174042] mapped:81579 shmem:128 pagetables:1742 [ 2559.174042] sec_pagetables:0 bounce:0 [ 2559.174042] kernel_misc_reclaimable:0 [ 2559.174042] free:136505 free_pcp:1148 free_cma:0 [ 2559.177123] Node 0 active_anon:292kB inactive_anon:175324kB active_file:87724kB inactive_file:223708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:326316kB dirty:1768kB writeback:0kB shmem:512kB writeback_tmp:0kB kernel_stack:4992kB pagetables:6968kB sec_pagetables:0kB all_unreclaimable? no [ 2559.179112] Node 0 DMA free:15360kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2559.181076] lowmem_reserve[]: 0 1603 1603 1603 [ 2559.181667] Node 0 DMA32 free:530660kB boost:0kB min:5100kB low:6740kB high:8380kB reserved_highatomic:0KB active_anon:292kB inactive_anon:175324kB active_file:87724kB inactive_file:223708kB unevictable:0kB writepending:1756kB present:2080640kB managed:1652760kB mlocked:0kB bounce:0kB free_pcp:4524kB local_pcp:2168kB free_cma:0kB [ 2559.183824] lowmem_reserve[]: 0 0 0 0 [ 2559.184214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2559.185296] Node 0 DMA32: 99*4kB (UME) 111*8kB (ME) 84*16kB (UME) 103*32kB (UME) 55*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (U) 2*1024kB (ME) 2*2048kB (UE) 125*4096kB (M) = 530660kB [ 2559.187061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2559.187868] 35486 total pagecache pages [ 2559.188324] 0 pages in swap cache [ 2559.188711] Free swap = 0kB [ 2559.189010] Total swap = 0kB [ 2559.189237] 524158 pages RAM [ 2559.189610] 0 pages HighMem/MovableOnly [ 2559.190015] 107128 pages reserved [ 2559.242686] syz-executor.7: attempt to access beyond end of device [ 2559.242686] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.243909] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2559.322221] syz-executor.0: attempt to access beyond end of device [ 2559.322221] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.323393] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 42) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:37:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 31) 13:37:57 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:37:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x3a) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d92fa36d988ca2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:37:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) [ 2559.469391] syz-executor.6: attempt to access beyond end of device [ 2559.469391] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.470717] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2559.471923] loop7: detected capacity change from 0 to 40 [ 2559.533019] loop2: detected capacity change from 0 to 256 [ 2559.561825] loop0: detected capacity change from 0 to 40 [ 2559.568981] loop4: detected capacity change from 0 to 40 13:37:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 43) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2559.656418] syz-executor.0: attempt to access beyond end of device [ 2559.656418] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.657687] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x800c2, 0x42) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 13:37:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) [ 2559.789391] loop0: detected capacity change from 0 to 40 13:37:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) sendfile(r0, r3, &(0x7f0000000240)=0xfffffffffffffffc, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x27, 0x6, 0x999, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2559.909429] syz-executor.7: attempt to access beyond end of device [ 2559.909429] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2559.911555] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2559.928517] loop6: detected capacity change from 0 to 40 [ 2559.930793] loop2: detected capacity change from 0 to 256 [ 2559.943241] FAULT_INJECTION: forcing a failure. [ 2559.943241] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.945091] CPU: 0 PID: 13797 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2559.946198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.947303] Call Trace: [ 2559.947666] [ 2559.947989] dump_stack_lvl+0x8f/0xb7 [ 2559.948537] should_fail_ex.cold+0x5/0xa [ 2559.949121] ? alloc_vmap_area+0x16d/0x1d60 [ 2559.949726] should_failslab+0x9/0x20 [ 2559.950271] kmem_cache_alloc_node+0x5d/0x420 [ 2559.950912] alloc_vmap_area+0x16d/0x1d60 [ 2559.951529] ? mark_held_locks+0x9e/0xe0 [ 2559.952132] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2559.952783] __get_vm_area_node+0x13c/0x350 [ 2559.953385] __vmalloc_node_range+0x252/0x1430 [ 2559.954024] ? bdev_disk_changed+0x334/0xf50 [ 2559.954626] ? lock_acquire+0x1b6/0x530 [ 2559.955223] ? bdev_disk_changed+0x334/0xf50 [ 2559.955830] ? lock_release+0x3b6/0x750 [ 2559.956388] ? __pfx___vmalloc_node_range+0x10/0x10 [ 2559.957073] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.957756] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2559.958458] ? bdev_disk_changed+0x334/0xf50 [ 2559.959202] __vmalloc_node+0xac/0xf0 [ 2559.959740] ? bdev_disk_changed+0x334/0xf50 [ 2559.960352] bdev_disk_changed+0x334/0xf50 [ 2559.960931] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2559.961672] loop_reread_partitions+0x68/0xd0 [ 2559.962276] loop_set_status+0x4b8/0x860 [ 2559.962844] lo_ioctl+0x70f/0x1990 [ 2559.963368] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.963965] ? lockdep_hardirqs_on+0x7d/0x100 [ 2559.964599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.965297] ? do_vfs_ioctl+0x137/0x1af0 [ 2559.965865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2559.966561] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2559.967243] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2559.967927] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2559.968733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2559.969572] ? __pfx_lock_release+0x10/0x10 [ 2559.970189] ? __pfx_lo_ioctl+0x10/0x10 [ 2559.970748] blkdev_ioctl+0x350/0xa00 [ 2559.971304] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.971916] ? selinux_file_ioctl+0xb5/0x260 [ 2559.972547] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2559.973159] __x64_sys_ioctl+0x19e/0x210 [ 2559.973729] do_syscall_64+0x3f/0x90 [ 2559.974255] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2559.974962] RIP: 0033:0x7f85cf83d8d7 [ 2559.975482] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.977832] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2559.978828] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2559.979774] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2559.980704] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.981627] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2559.982561] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2559.983549] 13:37:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2559.986467] loop4: detected capacity change from 0 to 40 [ 2560.004254] loop1: detected capacity change from 0 to 40 [ 2560.018201] FAT-fs (loop1): bogus number of reserved sectors [ 2560.019158] FAT-fs (loop1): Can't find a valid FAT filesystem 13:37:58 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:37:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2560.089048] syz-executor.0: attempt to access beyond end of device [ 2560.089048] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2560.095028] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:37:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 32) [ 2560.174731] syz-executor.4: attempt to access beyond end of device [ 2560.174731] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2560.176289] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2560.245944] FAT-fs (loop5): bogus number of reserved sectors [ 2560.246748] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2560.276045] loop7: detected capacity change from 0 to 40 [ 2560.477981] syz-executor.7: attempt to access beyond end of device [ 2560.477981] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2560.479267] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:38:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000000)='./file2\x00', 0x280000, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00', &(0x7f0000000300)='\x00', 0x1, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0xfffffed5, 0xc2, 0xff, 0x7, 0x0, 0x0, 0x10000, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x100000000, 0x0, 0x6, 0x2, 0xf483, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 13:38:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 44) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:38:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:19 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:38:19 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r4, r3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x80000001}, 0x16, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x50b, 0x7, 0x6, 0x8000, 0xa, [{0x7, 0x3, 0x200000000, '\x00', 0x308}, {0xfff, 0x7b, 0x72, '\x00', 0x108}, {0x8, 0x200, 0x2}, {0xfffffffffffffffa, 0x4, 0x3ff, '\x00', 0xe04}, {0x7, 0x2, 0xfffffffffffffff9}, {0x0, 0x1, 0x200, '\x00', 0xd01}, {0x8000, 0x330, 0x7, '\x00', 0x588}, {0x5, 0xfffffffffffffffe, 0x0, '\x00', 0x101}, {0x402, 0x9, 0x0, '\x00', 0x400}, {0x7, 0x9, 0x0, '\x00', 0x2000}]}) 13:38:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 33) 13:38:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) [ 2580.798102] loop2: detected capacity change from 0 to 256 [ 2580.823271] loop0: detected capacity change from 0 to 40 [ 2580.835036] loop4: detected capacity change from 0 to 40 [ 2580.873293] loop1: detected capacity change from 0 to 40 [ 2580.873871] loop6: detected capacity change from 0 to 40 [ 2580.875807] loop7: detected capacity change from 0 to 40 [ 2580.887385] FAT-fs (loop5): bogus number of reserved sectors [ 2580.888251] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2580.898424] FAT-fs (loop1): bogus number of reserved sectors [ 2580.899281] FAT-fs (loop1): Can't find a valid FAT filesystem 13:38:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 45) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2581.054893] syz-executor.4: attempt to access beyond end of device [ 2581.054893] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2581.056713] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2581.190243] loop2: detected capacity change from 0 to 256 [ 2581.266025] syz-executor.7: attempt to access beyond end of device [ 2581.266025] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2581.268057] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2581.273896] syz-executor.0: attempt to access beyond end of device [ 2581.273896] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2581.275966] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2581.301207] syz-executor.6: attempt to access beyond end of device [ 2581.301207] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2581.303131] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:38:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 13:38:19 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:38:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) [ 2581.459051] loop4: detected capacity change from 0 to 40 [ 2581.573995] loop0: detected capacity change from 0 to 40 [ 2581.859042] syz-executor.0: attempt to access beyond end of device [ 2581.859042] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2581.860880] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:38:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 46) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:38:35 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:38:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) 13:38:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x80) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 34) 13:38:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x24, 0x2e, 0xe21, 0x0, 0x0, "", [@generic="8e274d9475aab6f2cc4ee871c650108390"]}, 0x24}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0xffc8, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe277}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x280c0, 0x0) getpeername$unix(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) 13:38:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2596.896498] loop6: detected capacity change from 0 to 40 [ 2596.897420] loop2: detected capacity change from 0 to 256 [ 2596.899387] loop1: detected capacity change from 0 to 40 [ 2596.903971] loop7: detected capacity change from 0 to 40 [ 2596.908979] FAULT_INJECTION: forcing a failure. [ 2596.908979] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.910033] CPU: 1 PID: 13871 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2596.910580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2596.911135] Call Trace: [ 2596.911312] [ 2596.911473] dump_stack_lvl+0x8f/0xb7 [ 2596.911760] should_fail_ex.cold+0x5/0xa [ 2596.912062] ? __vmalloc_node_range+0x9ea/0x1430 [ 2596.912399] should_failslab+0x9/0x20 [ 2596.912672] __kmem_cache_alloc_node+0x5b/0x400 [ 2596.913005] ? __vmalloc_node_range+0x9ea/0x1430 [ 2596.913346] ? __vmalloc_node_range+0x9ea/0x1430 [ 2596.913690] __kmalloc_node+0x45/0xb0 [ 2596.913985] __vmalloc_node_range+0x9ea/0x1430 [ 2596.914344] ? bdev_disk_changed+0x334/0xf50 [ 2596.914688] ? lock_release+0x3b6/0x750 [ 2596.915002] ? __pfx___vmalloc_node_range+0x10/0x10 [ 2596.915377] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2596.915757] ? _raw_spin_unlock_irqrestore+0x2c/0x60 [ 2596.916139] ? bdev_disk_changed+0x334/0xf50 [ 2596.916470] __vmalloc_node+0xac/0xf0 [ 2596.916765] ? bdev_disk_changed+0x334/0xf50 [ 2596.917097] bdev_disk_changed+0x334/0xf50 [ 2596.917413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2596.917812] ? mark_lock.part.0+0xef/0x2f70 [ 2596.918138] loop_reread_partitions+0x68/0xd0 [ 2596.918477] loop_set_status+0x4b8/0x860 [ 2596.918784] lo_ioctl+0x70f/0x1990 [ 2596.919063] ? __pfx_lo_ioctl+0x10/0x10 [ 2596.919403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2596.919813] ? do_vfs_ioctl+0x137/0x1af0 [ 2596.920127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2596.920512] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2596.920868] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2596.921233] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2596.921664] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2596.922122] ? __pfx_lock_release+0x10/0x10 [ 2596.922454] ? __pfx_lo_ioctl+0x10/0x10 [ 2596.922772] blkdev_ioctl+0x350/0xa00 [ 2596.923069] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2596.923401] ? selinux_file_ioctl+0xb5/0x260 [ 2596.923768] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2596.924103] __x64_sys_ioctl+0x19e/0x210 [ 2596.924437] do_syscall_64+0x3f/0x90 [ 2596.924731] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2596.925140] RIP: 0033:0x7f85cf83d8d7 [ 2596.925415] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.926717] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2596.927281] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2596.927830] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2596.928364] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2596.928893] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2596.929414] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2596.929958] [ 2596.932085] FAT-fs (loop1): bogus number of reserved sectors [ 2596.932603] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2596.937694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13873 comm=syz-executor.6 [ 2596.974792] loop4: detected capacity change from 0 to 40 [ 2596.979097] loop0: detected capacity change from 0 to 40 [ 2596.981358] FAT-fs (loop5): bogus number of reserved sectors [ 2596.981829] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2597.076270] syz-executor.6: attempt to access beyond end of device [ 2597.076270] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.077417] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2597.117584] syz-executor.4: attempt to access beyond end of device [ 2597.117584] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.118369] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2597.132258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13886 comm=syz-executor.6 13:38:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 47) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2597.176288] syz-executor.4: attempt to access beyond end of device [ 2597.176288] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.177259] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2597.229987] syz-executor.7: attempt to access beyond end of device [ 2597.229987] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.231033] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:38:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000dc018cfd7afaf838126341cb149113ea48067d0648928f168c1d7d9b27e5e72604e309eae8bff1b56a32e7ef38af1e75a337377e42a1de39c1553cf07f81268fbdba423ef9eefdee1ceb137910ee3853ee76f160519621326cfe6482439b05d369aba0a11fff003bc2756d04", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000000000002e2f66696c653100"]) openat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:38:35 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:38:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) write$binfmt_aout(r1, &(0x7f0000000300)={{0x107, 0x8, 0x0, 0x2dc, 0x1de, 0x1, 0x303, 0x1}, "6f24037f60b4e2298eb72a8ee0dcf989576dae94df4efe96615be6acf03248096d0422b6303aed2d781fad92e02ae153b3a4718dd0511c60b3063d6f378b3755268e72c0cf4cb513af6fe771a20d52e2c1238a9a76eae2b5033217cfae59624d9fe48ae6c2997bae70f2a16c0afbeffa0d97a7158e5b7f89b8f95d1cb490b37a8cdf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2597.336299] loop2: detected capacity change from 0 to 256 [ 2597.341980] syz-executor.0: attempt to access beyond end of device [ 2597.341980] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.343971] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:38:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 35) [ 2597.373942] loop6: detected capacity change from 0 to 40 13:38:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) 13:38:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 48) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2597.426399] loop4: detected capacity change from 0 to 40 [ 2597.490158] loop7: detected capacity change from 0 to 40 [ 2597.518007] loop2: detected capacity change from 0 to 256 [ 2597.535595] loop0: detected capacity change from 0 to 40 [ 2597.552204] syz-executor.4: attempt to access beyond end of device [ 2597.552204] loop4: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 2597.587831] syz-executor.4: attempt to access beyond end of device [ 2597.587831] loop4: rw=2049, sector=52, nr_sectors = 4 limit=40 [ 2597.589031] Buffer I/O error on dev loop4, logical block 13, lost async page write [ 2597.625124] syz-executor.6: attempt to access beyond end of device [ 2597.625124] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.626268] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:38:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 49) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:38:36 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2597.703396] syz-executor.6: attempt to access beyond end of device [ 2597.703396] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.704403] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:38:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat2(r2, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)={0x101000, 0xee0ef941235ff152, 0xcdd532ab0f5633b7}, 0x18) r4 = syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000640)=[{&(0x7f0000000300)="598a3a62cf6692fe5e9f7f5870c4d1c3098cee93a1152f496130b6ec2e5d8049bf867ae9fb502bcd745b04e0b5d31facc4610acf9e6024d32b17f46623ae4fbc0e154c98afa415d7b2d2ccef1041144b0cf9bced4ce71bf28ed808d10fc3a4a87b40d0dfcefa50e2ca032417cbb6f1e23b2210ce0bb9056beb123810331162a7cf16fcf8aa1afe9c", 0x88, 0x3}, {&(0x7f00000003c0)="a36df565cfd94715137ba8eb1f9644c838772dcbdd8a754a06dc66ccf1e2a0a2b117d0b4412c4e933e9679011a673aedc26f15c7591b0de8eb8efab6da2801231fab7f159d107c72cf7ecf75d61e07a1b6524c3c2ad86c81b16cef1fb8a8f72771fbf6e0d3fa92dd6394cdb685c44f23b858f0d0cc87c63f6f57c754407f1ad6901923a20b1e42e3799079903f3f8abe5006ba28ee5912d76b48b1e86f7541a28b10f99d4841bdceae9c70075e712078ccf223c4114ec465cc6625f8f8e9b8485f8c9e1fd0db720f388f0b056ccc364bb967", 0xd2, 0x262}, {&(0x7f0000000240)="af0a65fe48fb55d7649f00f549334d73", 0x10, 0x100000001}, {&(0x7f00000004c0)="f9999ae164756aa6bec7f0b0a5657757df560b31e45cba44d862490c909b6e857d6c283ff4cf5b909024141954d7e1d21bf9acd63e318c5b64a36fee672a8024289df0a191793b25a502b0d7a42519fa70eabc424edb9a9a640fc4bd9a5aef083f7c866ebe78dc0c7d3496fd35db053688f5211264e77cfe02e6dbcecc16c5b79d25e0ee938de53ee4a89aeec97af73893ff18bcb6949cd3b268c8741a418342003ce6b10eed62c51a4c0830c973200b020278f934759198e44c3fc0a803241208820b565947dc8b", 0xc8, 0x7556}, {&(0x7f00000005c0)="3c1af15c9eb38f40a1eac601ef376d706dd70f6475309efa544656fb72b75d5fb86169323e0d8aafbece753fd3", 0x2d, 0x80000001}, {&(0x7f0000000600)="3af7da07cf344f291d6dc5f959db8d540e84ffc6f2fe26fcf52dbd03", 0x1c, 0x3}], 0xa08020, &(0x7f0000000700)={[{}, {@huge_never}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_always}, {@size={'size', 0x3d, [0x36, 0x32]}}, {@gid={'gid', 0x3d, 0xee01}}, {@huge_within_size}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@appraise}, {@measure}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]}) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000800)={{r4}, "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"}) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff) dup2(r6, r5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000001800)) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2597.794004] syz-executor.0: attempt to access beyond end of device [ 2597.794004] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2597.795075] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2597.802735] loop2: detected capacity change from 0 to 256 [ 2597.805809] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2597.810909] loop4: detected capacity change from 0 to 40 13:38:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaaad7, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0xff}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2597.888608] loop5: detected capacity change from 0 to 40 [ 2597.900397] loop1: detected capacity change from 0 to 40 [ 2597.910523] FAT-fs (loop1): bogus number of reserved sectors [ 2597.910961] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2597.912985] FAT-fs (loop5): bogus number of reserved sectors [ 2597.913465] FAT-fs (loop5): Can't find a valid FAT filesystem 13:38:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 50) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2598.005232] loop2: detected capacity change from 0 to 256 13:38:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 36) 13:38:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) 13:38:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x5}, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x1000, 0x2, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x884800, 0x0) bind(r4, &(0x7f0000000300)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r3, 0x3f, 0x3, 0x8}) sendmsg$AUDIT_TRIM(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000880) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0xaa, 0x4, 0x9, 0x0, 0x3, 0x19028, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x280000, 0x0, @perf_config_ext={0x8, 0x4}, 0x4810, 0x1, 0x4be, 0x0, 0x40, 0x0, 0xfb, 0x0, 0xfffffffc, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r1, 0xa) sendfile(r2, r0, 0x0, 0xfffffdef) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xae, 0x0, 0x28, 0x4b140, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000480), 0x4}, 0x180, 0x1f, 0xa1e, 0x9, 0x7f, 0x8, 0xd4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, r6, 0x1) 13:38:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:53 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfc, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2614.808070] loop0: detected capacity change from 0 to 40 13:38:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)="f9b0b713563b3e5b0e40dfcc06a8d15f2f8c1823a49206178655faba31f31e7e73bd75db32756b5bfffd49a8be1ff8984d7845605714655bb883b45723478e040cb9c3f762c72180629c2d8060da43573e868489a016921e07f5a955bf8e33b0d805eba3ed3e5f8f3b55b6ef7d621f34caf91082b366c8237a2d5ecf1c6271ac92f36074e0cae52eea9ecfd7035f7f0c560376b6d4c7de2148362945d66dca2ec8a07fad98bdee617925f43dc39c1b043f681a105c59f5a08b81a5452452bab2a27847c53730b517bfc8e15d3ebed11936cb9ce911e7b9264b0d279d08c6f9c3f031b24ea9973536737d0b1fc59931e0", 0xf0}, {&(0x7f0000000400)="4a4d245b89a4d43a135fe22707099f006dc294367460cf6d94b4ca81a5958fa354afb87555a96da44d48865c06162a649f1aae13c76cffa6344fea5cee5d5db595395012358f331c2bbcf7e2f888508f32b8841e3942081389db53326619536f533e861f5279c3e6a6fd7cc9eb70dc93c59b8cc11029bef3e450222966709e185b64b2671d7107", 0x87}, {&(0x7f0000000180)="8d54e77fb5bc543d6bbcc28005f85ddc2d24c4b92ee17f823559230f470494e127a810d1a55bd0ffd221b7e60f67916f52a4539ddbafc8b8fd9dc3f4c9dea09add4339982aa17d597ef06b1c7a7f8d0b777dbdc080d18652e18d6bdd7d2ed194da13baa088786dc9ddf454be22bf9ce60beaf312e28ba8815d0976ff", 0x7c}], 0x3, 0x0, 0x0, 0x800}}], 0x1, 0x44) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:38:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 51) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:38:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2614.834180] loop7: detected capacity change from 0 to 40 [ 2614.845040] loop5: detected capacity change from 0 to 40 [ 2614.845886] loop6: detected capacity change from 0 to 40 [ 2614.848340] loop1: detected capacity change from 0 to 40 [ 2614.867054] FAT-fs (loop5): bogus number of reserved sectors [ 2614.868068] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2614.869424] FAT-fs (loop1): bogus number of reserved sectors [ 2614.870259] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2614.882041] loop4: detected capacity change from 0 to 40 [ 2614.898030] loop2: detected capacity change from 0 to 256 [ 2614.956181] FAULT_INJECTION: forcing a failure. [ 2614.956181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2614.958106] CPU: 1 PID: 13959 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2614.959332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.960529] Call Trace: [ 2614.960944] [ 2614.961313] dump_stack_lvl+0x8f/0xb7 [ 2614.961926] should_fail_ex.cold+0x5/0xa [ 2614.962577] prepare_alloc_pages+0x178/0x500 [ 2614.963291] __alloc_pages+0x149/0x500 [ 2614.963944] ? __pfx___alloc_pages+0x10/0x10 [ 2614.964781] alloc_pages+0x1a0/0x260 [ 2614.965380] __get_free_pages+0x10/0xb0 [ 2614.965992] bdev_disk_changed+0x39e/0xf50 [ 2614.966685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2614.967493] ? mark_lock.part.0+0xef/0x2f70 [ 2614.968232] loop_reread_partitions+0x68/0xd0 [ 2614.968973] loop_set_status+0x4b8/0x860 [ 2614.969644] lo_ioctl+0x70f/0x1990 [ 2614.970247] ? __pfx_lo_ioctl+0x10/0x10 [ 2614.970969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2614.971871] ? do_vfs_ioctl+0x137/0x1af0 [ 2614.972540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2614.973433] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2614.974203] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2614.974998] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2614.975954] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2614.976931] ? __pfx_lock_release+0x10/0x10 [ 2614.977650] ? __pfx_lo_ioctl+0x10/0x10 [ 2614.978273] blkdev_ioctl+0x350/0xa00 [ 2614.978868] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2614.979545] ? selinux_file_ioctl+0xb5/0x260 [ 2614.980266] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2614.980942] __x64_sys_ioctl+0x19e/0x210 [ 2614.981553] do_syscall_64+0x3f/0x90 [ 2614.982119] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2614.982869] RIP: 0033:0x7f85cf83d8d7 [ 2614.983416] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.986034] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2614.987174] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2614.988255] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2614.989307] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.990368] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2614.991463] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2614.992665] [ 2615.174055] bio_check_eod: 2 callbacks suppressed [ 2615.174080] syz-executor.6: attempt to access beyond end of device [ 2615.174080] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.176847] buffer_io_error: 1 callbacks suppressed [ 2615.176864] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2615.229972] syz-executor.0: attempt to access beyond end of device [ 2615.229972] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.231816] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:38:53 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x110, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2615.307697] syz-executor.6: attempt to access beyond end of device [ 2615.307697] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.309621] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2615.330893] syz-executor.7: attempt to access beyond end of device [ 2615.330893] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.333115] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2615.397378] syz-executor.4: attempt to access beyond end of device [ 2615.397378] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.399806] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2615.522743] syz-executor.4: attempt to access beyond end of device [ 2615.522743] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.524428] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:39:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:08 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x218, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:39:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 52) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) 13:39:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1caa80, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) fcntl$setstatus(r1, 0x4, 0x6000) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r4, &(0x7f00000001c0)='./file0\x00') renameat(r4, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x80000, 0x5) 13:39:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 37) 13:39:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000740), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/143, 0x8f}], 0x4, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/238, 0xee}, {&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000d00)=""/170, 0xaa}, {&(0x7f0000000dc0)=""/124, 0x7c}], 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14b4180000080000000cf4d16f8f006c", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000005c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000000fc0)=""/125, 0x7d}, {&(0x7f0000001040)=""/232, 0xe8}, {&(0x7f0000001140)=""/197, 0xc5}, {&(0x7f0000001240)=""/195, 0xc3}, {&(0x7f0000001340)=""/221, 0xdd}, {&(0x7f0000001440)=""/13, 0xd}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/67, 0x43}, {&(0x7f0000004e40)=""/218, 0xda}], 0xa}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001580)=""/171, 0xab}, {&(0x7f0000001640)=""/36, 0x24}, {&(0x7f0000001680)=""/92, 0x5c}], 0x3, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}}, {{&(0x7f00000038c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000003940)=""/68, 0x44}], 0x1, &(0x7f00000039c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000004b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x6, 0x20, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000300)="568be23da6d74720b1e191f92e09cc09bfdbbfe33a2ee665d4dece84419b97378ee523e512afe9a435606a7849904870855152c2951ea28cef2bfdd6b3d49608baf64139e7988c3b2eab47df23f12b71599f20604fff565ca904cf41c41a1edc2102614ff960e9a4e76c6a3f8373d5717701eea275a01445a4d1c8957dd1c6d8fa010e73b9864224e32e4a40e5", 0x8d, 0x1000}, {&(0x7f00000003c0)="5edd1905c42aa419815345adf56a89d23e22914b3b4fe8aaaac4c955d65285ab22041eb3252f9295a8f3a89b8d85db212dc95bcbdb0236e0694bdb883d34185f44b81d934cb4724062c3a29ddb2a1fdec88c4249f9300511fe8ac7967d19542d8518893052c0325b5ad67e92900d215872a7d159bfff8d436494f60c08b170df2b73bf0a6ef18123aa7e9fe4bdaef1587f2a352ceb22b680caa560b9702d297bee50dbb32ad1edd0ecccf078b65947d79945152395bceea9feb455f82f7b91d99b4103a87514c817dd5d88089f4f15054e4279e9045d551770e8bbde41b4d345ba4aab264214d1989c", 0xe9, 0x1}, {&(0x7f00000004c0)="40b288d6d966f6cd9bff9860127d13c503c6865e8aa194097b3d1b0cde82a12705c449d6aaa7466dd282724fb43d76d1f20a3f7f662f55a42ef45b0613f5d00c73aeed1d7ac15d3f78964e11fddb8d3b2e23bafd11905d04dcbfcb065a8ece7cf8558b5457eabe8f477c9b89b23df82039eac8a56c5eef9fa9ae8088764353cdf42eeeaeee4b7b0f2c56750f8c", 0x8d, 0xd2}, {&(0x7f0000000580)="f5a763d9e4728a5f40cdc6c1ff6dee7f4131896d72430202feb54e8ea8cc5290b7833a27fd13edec06f8b00b998164a192a8f3bb5ba8005333970921acdd7834f1c43655", 0x44, 0x429d}, {&(0x7f0000000600)="a41e95219c3948ebd97efb6b2321476d45f9ed4ffecedfc45363bdeaf0ab169f8ba51a0922d7000c86bace1a2fdd86ad8d3b8cd556f6d99af915a0013271cd3ead92c07bd5dc3c6d2e81f783afc819186ec2644af485d39fad9e5f75d976aabee9a22b16a6f54aa88895e552187fb5b3f893231872975d85b761cf601151053df7f3ac9fb15ed5ca4f772d5a125b507ffb0440e28c2991f33b103743ca3504f55508", 0xa2, 0x40}], 0x1200801, &(0x7f0000004d00)={[{@gid}], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x38, 0x32, 0x32, 0x39, 0x37, 0x31], 0x2d, [0x63, 0x54, 0x39, 0x63], 0x2d, [0x37, 0x37, 0x36, 0x34], 0x2d, [0x65, 0x36, 0x0, 0x39], 0x2d, [0x65, 0x33, 0x36, 0x65, 0x33, 0x62, 0x35, 0x64]}}}, {@uid_lt={'uid<', r2}}]}) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r4, r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) [ 2629.803934] loop5: detected capacity change from 0 to 40 [ 2629.816194] loop1: detected capacity change from 0 to 40 [ 2629.830591] FAT-fs (loop5): bogus number of reserved sectors [ 2629.831348] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2629.835242] loop7: detected capacity change from 0 to 40 [ 2629.838844] loop6: detected capacity change from 0 to 40 [ 2629.839333] FAT-fs (loop1): bogus number of reserved sectors [ 2629.839770] loop0: detected capacity change from 0 to 40 [ 2629.840337] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2629.844730] loop4: detected capacity change from 0 to 40 [ 2629.879937] loop2: detected capacity change from 0 to 256 [ 2630.057148] syz-executor.4: attempt to access beyond end of device [ 2630.057148] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.059232] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2630.116814] syz-executor.6: attempt to access beyond end of device [ 2630.116814] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.118797] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:39:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 53) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2630.194110] syz-executor.7: attempt to access beyond end of device [ 2630.194110] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.195659] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:39:08 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x300, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2630.265228] syz-executor.0: attempt to access beyond end of device [ 2630.265228] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.266779] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:39:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) (fail_nth: 38) 13:39:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) [ 2630.319065] loop0: detected capacity change from 0 to 40 13:39:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0xc000, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0x8, 0x800}) openat(r3, &(0x7f0000000040)='./file1\x00', 0x80240, 0x8a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pipe(&(0x7f0000000240)) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r5, &(0x7f00000001c0)='./file0\x00') renameat(r5, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0x4}, 0x6) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000380)={&(0x7f0000000300)=""/90, 0x5a, 0x3f, 0x798}) chdir(&(0x7f0000000180)='./file0\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2630.425380] loop2: detected capacity change from 0 to 256 [ 2630.467573] loop7: detected capacity change from 0 to 40 [ 2630.472398] FAULT_INJECTION: forcing a failure. [ 2630.472398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2630.474109] CPU: 0 PID: 14010 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2630.474901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.475691] Call Trace: [ 2630.475943] [ 2630.476184] dump_stack_lvl+0x8f/0xb7 [ 2630.476580] should_fail_ex.cold+0x5/0xa [ 2630.477008] prepare_alloc_pages+0x178/0x500 [ 2630.477470] __alloc_pages+0x149/0x500 [ 2630.477865] ? __pfx___alloc_pages+0x10/0x10 [ 2630.478237] loop6: detected capacity change from 0 to 40 [ 2630.478300] ? lock_release+0x3b6/0x750 [ 2630.479380] ? __filemap_get_folio+0x254/0xc90 [ 2630.479865] ? xas_load+0x6a/0x140 [ 2630.480261] alloc_pages+0x1a0/0x260 [ 2630.480648] filemap_alloc_folio+0x32a/0x410 [ 2630.481091] ? do_syscall_64+0x3f/0x90 [ 2630.481486] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2630.481982] ? lock_is_held_type+0xdb/0x130 [ 2630.482418] ? find_held_lock+0x2c/0x110 [ 2630.482840] do_read_cache_folio+0x179/0x500 [ 2630.483278] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2630.483766] read_part_sector+0xf4/0x320 [ 2630.484211] read_lba+0x214/0x460 [ 2630.484573] ? __pfx_read_lba+0x10/0x10 [ 2630.484990] efi_partition+0x2b3/0x20b0 [ 2630.485397] ? __pfx_format_decode+0x10/0x10 [ 2630.485853] ? memcpy+0x3d/0x60 [ 2630.486205] ? __pfx_efi_partition+0x10/0x10 [ 2630.486652] ? rcu_read_lock_sched_held+0x42/0x80 [ 2630.487135] ? __alloc_pages+0x3d0/0x500 [ 2630.487547] ? __pfx___alloc_pages+0x10/0x10 [ 2630.488016] ? snprintf+0xbf/0x100 [ 2630.488385] ? __pfx_snprintf+0x10/0x10 [ 2630.488798] ? alloc_pages+0x1a8/0x260 [ 2630.489187] ? __pfx_efi_partition+0x10/0x10 [ 2630.489642] bdev_disk_changed+0x627/0xf50 [ 2630.490089] loop_reread_partitions+0x68/0xd0 [ 2630.490537] loop_set_status+0x4b8/0x860 [ 2630.490560] loop4: detected capacity change from 0 to 40 [ 2630.490959] lo_ioctl+0x70f/0x1990 [ 2630.492098] ? __pfx_lo_ioctl+0x10/0x10 [ 2630.492551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2630.493071] ? do_vfs_ioctl+0x137/0x1af0 [ 2630.493482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2630.493990] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2630.494465] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2630.494959] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 2630.495548] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2630.496158] ? __pfx_lock_release+0x10/0x10 [ 2630.496602] ? __pfx_lo_ioctl+0x10/0x10 [ 2630.497002] blkdev_ioctl+0x350/0xa00 [ 2630.497400] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2630.497835] ? selinux_file_ioctl+0xb5/0x260 [ 2630.498296] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2630.498741] __x64_sys_ioctl+0x19e/0x210 [ 2630.499148] do_syscall_64+0x3f/0x90 [ 2630.499529] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2630.500049] RIP: 0033:0x7f85cf83d8d7 [ 2630.500414] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.502118] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2630.502851] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83d8d7 [ 2630.503526] RDX: 00007f85ccdb3050 RSI: 0000000000004c04 RDI: 0000000000000007 [ 2630.504197] RBP: 00007f85ccdb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.504882] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f85ccdb3050 [ 2630.505550] R13: 00007ffe7db8d8af R14: 00007f85ccdb3300 R15: 0000000000022000 [ 2630.506261] [ 2630.520229] FAULT_INJECTION: forcing a failure. [ 2630.520229] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.522397] CPU: 0 PID: 14006 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2630.523271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.524069] Call Trace: [ 2630.524323] [ 2630.524551] dump_stack_lvl+0x8f/0xb7 [ 2630.524928] should_fail_ex.cold+0x5/0xa [ 2630.525345] ? fat_cache_add.part.0+0x5b4/0xb50 [ 2630.525810] should_failslab+0x9/0x20 [ 2630.526191] kmem_cache_alloc+0x5a/0x410 [ 2630.526619] fat_cache_add.part.0+0x5b4/0xb50 [ 2630.527073] fat_get_cluster+0x922/0xd40 [ 2630.527503] ? __pfx_fat_get_cluster+0x10/0x10 [ 2630.527996] fat_get_mapped_cluster+0x216/0x450 [ 2630.528492] ? __pfx_fat_get_mapped_cluster+0x10/0x10 [ 2630.529006] ? perf_swevent_event+0x6c/0x550 [ 2630.529465] fat_bmap+0x1fc/0x460 [ 2630.529836] fat_get_block+0x33e/0x930 [ 2630.530246] ? __pfx_fat_get_block+0x10/0x10 [ 2630.530696] ? lock_is_held_type+0xdb/0x130 [ 2630.531161] __block_write_begin_int+0x380/0x13d0 [ 2630.531648] ? __pfx_fat_get_block+0x10/0x10 [ 2630.532116] ? __pfx___block_write_begin_int+0x10/0x10 [ 2630.532641] ? PageHeadHuge+0x169/0x1b0 [ 2630.533054] ? __pfx_fat_get_block+0x10/0x10 [ 2630.533492] block_write_begin+0xb9/0x450 [ 2630.533924] cont_write_begin+0x4fe/0x700 [ 2630.534349] ? lock_is_held_type+0xdb/0x130 [ 2630.534800] ? __pfx_fat_get_block+0x10/0x10 [ 2630.535257] ? __pfx_cont_write_begin+0x10/0x10 [ 2630.535714] ? lock_release+0x3b6/0x750 [ 2630.536132] ? __mark_inode_dirty+0x5a6/0xe70 [ 2630.536604] ? mark_held_locks+0x9e/0xe0 [ 2630.537022] fat_write_begin+0x89/0x180 [ 2630.537414] ? __pfx_fat_get_block+0x10/0x10 [ 2630.537869] generic_perform_write+0x25a/0x580 [ 2630.538350] ? __pfx_generic_perform_write+0x10/0x10 [ 2630.538852] ? __pfx_fat_update_time+0x10/0x10 [ 2630.539306] ? __pfx_file_update_time+0x10/0x10 [ 2630.539788] ? generic_write_checks+0x2c0/0x400 [ 2630.540291] __generic_file_write_iter+0x308/0x4b0 [ 2630.540786] ? do_sendfile+0xb1d/0x1280 [ 2630.541183] ? __x64_sys_sendfile64+0x248/0x2a0 [ 2630.541646] generic_file_write_iter+0xe7/0x350 [ 2630.542119] do_iter_readv_writev+0x211/0x3c0 [ 2630.542586] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2630.543091] ? avc_policy_seqno+0xd/0x70 [ 2630.543514] ? security_file_permission+0xb5/0xe0 [ 2630.544016] do_iter_write+0x18b/0x700 [ 2630.544425] ? lock_is_held_type+0xdb/0x130 [ 2630.544874] vfs_iter_write+0x74/0xb0 [ 2630.545272] iter_file_splice_write+0x73e/0xcb0 [ 2630.545768] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2630.546275] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2630.546800] ? inode_security+0x105/0x140 [ 2630.547229] ? security_file_permission+0xb5/0xe0 [ 2630.547715] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2630.548245] direct_splice_actor+0x113/0x180 [ 2630.548686] splice_direct_to_actor+0x33a/0x8c0 [ 2630.549151] ? __pfx_direct_splice_actor+0x10/0x10 [ 2630.549636] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2630.550138] ? security_file_permission+0xb5/0xe0 [ 2630.550630] do_splice_direct+0x1bc/0x290 [ 2630.551044] ? __pfx_do_splice_direct+0x10/0x10 [ 2630.551534] ? lock_is_held_type+0xdb/0x130 [ 2630.552002] do_sendfile+0xb1d/0x1280 [ 2630.552411] ? __pfx_do_sendfile+0x10/0x10 [ 2630.552860] __x64_sys_sendfile64+0x248/0x2a0 [ 2630.553313] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2630.553802] ? syscall_enter_from_user_mode+0x21/0x50 [ 2630.554313] ? syscall_enter_from_user_mode+0x21/0x50 [ 2630.554831] do_syscall_64+0x3f/0x90 [ 2630.555212] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2630.555720] RIP: 0033:0x7f0eb6263b19 [ 2630.556089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2630.557784] RSP: 002b:00007f0eb37d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2630.558519] RAX: ffffffffffffffda RBX: 00007f0eb6376f60 RCX: 00007f0eb6263b19 [ 2630.559211] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2630.559900] RBP: 00007f0eb37d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.560599] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2630.561291] R13: 00007ffe15765a5f R14: 00007f0eb37d9300 R15: 0000000000022000 [ 2630.562005] [ 2630.659384] syz-executor.6: attempt to access beyond end of device [ 2630.659384] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.661160] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:39:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2630.882001] syz-executor.4: attempt to access beyond end of device [ 2630.882001] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.884379] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2630.898284] syz-executor.0: attempt to access beyond end of device [ 2630.898284] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2630.900439] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:39:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 54) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:09 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x500, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2631.083041] loop5: detected capacity change from 0 to 40 [ 2631.109180] FAT-fs (loop5): bogus number of reserved sectors [ 2631.110034] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2631.150168] loop1: detected capacity change from 0 to 40 [ 2631.172071] FAT-fs (loop1): invalid media value (0x00) [ 2631.172780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2631.195744] loop2: detected capacity change from 0 to 256 13:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x8842, 0x100) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x6, 0x5, &(0x7f0000000600)=[{&(0x7f0000000300)="fd778e942ce05c3b4bfb59587e908aaf85397355666c7976b35d01e440f2018772f143e746bfc00bcd11a4538bdff4d47eb1cbb1fc966ccac247341adf7dc34ada3c8c3d1a917113145f93c94bfee36c87aa348a1122fa81003e00a575dbf046c6b8c7a6ce8caf85a4112ab16f858c8495fb5405ba0bcf73248543ff3d504aa7f275", 0x82, 0x80}, {&(0x7f00000001c0)="71d370e24efe086c7f14948d3e4c6e129067e400ed8b8f383a06fad97b9965", 0x1f, 0x1}, {&(0x7f00000003c0)="4108234649729a15b83ca2cb810cdaaff0ba8d543e300b39ad84501a407384c676dd46f6e967ce72068343a706812ddc31f2592ffcc70a328a59b5293b9e43b82a53dd3e5658bc6532af59d78cdea39080453eba5d4089caf2ed0d034f25c6785a9007ccc78f775a2d4031ccef4cb816ca5fb40c7b52b326e9094ca9a000255123c88f1201114ac31d791f4104bb3a11c34328ac54d67506ac62b20e2ec539fd", 0xa0, 0x20000000006}, {&(0x7f0000000780)="5899cdc00f16a1d425e1bd901b10097b5e595f74a2599126435a2a1a47a5066a09183471b4a591a087ef197dbd5a22616b99e2e8ecdfd7eb8c45d7140c7b1c1c9d956a5c3d054d6e7d46edaecf48dfa48f816e48bda3b240e5ef03795ddabb40da7509b34922e8d02a3990e4dd1961115e7ed9b271aa6b3eb741e6df22d2f74624b616e31fc4d66693ca0ae1ad442322c8f18adc8a2f91f46b9585421f271bdb30b79e953907fb4b3cf1a945d2a9ceb3bec40f21ab656f3f97dbf20182d053fb12de4d2face664a1afde3573c244166d63dd5c69a5601433b41a112d73ad", 0xde, 0x81}, {&(0x7f0000000580)="c7aa4b174328fab44279ff3688870ecfc054543b3e928679bb93fe18c10187b0c3b08b58342e049637d9b1f24c509ac6270d993723fc9486bcd8603ea067a4e10317874270da08b0d47cad6bbf50a97a0f5253a016132924e4", 0x59, 0x2}], 0x2, &(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB=',\x00']) openat(r4, &(0x7f0000000240)='./file0\x00', 0x101000, 0x20) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01f50307ffffffffffff09"], 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:39:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 55) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:26 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x600, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2647.688213] loop5: detected capacity change from 0 to 40 13:39:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 13:39:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, 0x8}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2647.700112] loop4: detected capacity change from 0 to 40 [ 2647.712093] loop2: detected capacity change from 0 to 256 [ 2647.713637] loop1: detected capacity change from 0 to 40 [ 2647.715465] FAT-fs (loop1): invalid media value (0x00) [ 2647.715843] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2647.724580] FAT-fs (loop5): bogus number of reserved sectors [ 2647.725395] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2647.756965] loop7: detected capacity change from 0 to 40 [ 2647.791263] loop0: detected capacity change from 0 to 40 [ 2647.803049] loop6: detected capacity change from 0 to 40 13:39:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 56) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2647.898783] loop2: detected capacity change from 0 to 256 13:39:26 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x700, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:39:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 57) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2648.030316] loop2: detected capacity change from 0 to 256 [ 2648.055334] FAULT_INJECTION: forcing a failure. [ 2648.055334] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.056246] CPU: 1 PID: 14068 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2648.056797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.057337] Call Trace: [ 2648.057519] [ 2648.057684] dump_stack_lvl+0x8f/0xb7 [ 2648.057967] should_fail_ex.cold+0x5/0xa [ 2648.058260] ? getname_flags.part.0+0x50/0x4f0 [ 2648.058595] should_failslab+0x9/0x20 [ 2648.058873] kmem_cache_alloc+0x5a/0x410 [ 2648.059171] getname_flags.part.0+0x50/0x4f0 [ 2648.059483] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2648.059817] getname_flags+0x9e/0xf0 [ 2648.060097] vfs_fstatat+0x77/0xb0 [ 2648.060376] __do_sys_newstat+0x81/0x100 [ 2648.060672] ? __pfx___do_sys_newstat+0x10/0x10 [ 2648.061000] ? perf_trace_preemptirq_template+0x272/0x410 [ 2648.061400] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2648.061829] ? syscall_enter_from_user_mode+0x21/0x50 [ 2648.062181] ? syscall_enter_from_user_mode+0x21/0x50 [ 2648.062547] ? lockdep_hardirqs_on+0x7d/0x100 [ 2648.062874] do_syscall_64+0x3f/0x90 [ 2648.063136] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2648.063489] RIP: 0033:0x7f85cf83cb16 [ 2648.063750] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2648.064960] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2648.065474] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2648.065964] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2648.066478] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2648.067001] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000001 [ 2648.067519] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2648.068061] 13:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) flock(r0, 0xa) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2648.233324] loop4: detected capacity change from 0 to 40 [ 2648.335207] syz-executor.7: attempt to access beyond end of device [ 2648.335207] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.336406] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2648.358340] syz-executor.0: attempt to access beyond end of device [ 2648.358340] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.359639] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2648.387863] syz-executor.4: attempt to access beyond end of device [ 2648.387863] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.388778] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:39:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) [ 2648.439101] syz-executor.6: attempt to access beyond end of device [ 2648.439101] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.441074] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:39:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 58) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2648.484766] syz-executor.4: attempt to access beyond end of device [ 2648.484766] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.485633] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2648.501685] syz-executor.6: attempt to access beyond end of device [ 2648.501685] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.502527] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2648.630109] loop0: detected capacity change from 0 to 40 [ 2648.680095] loop2: detected capacity change from 0 to 256 [ 2648.722788] syz-executor.0: attempt to access beyond end of device [ 2648.722788] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2648.723847] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:39:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) 13:39:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 59) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:39 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1001, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:39:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) 13:39:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x8}}, './file1\x00'}) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file0\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4f40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000030000000000004004", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) recvmmsg$unix(r3, &(0x7f0000003580)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/205, 0xcd}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000001400)=""/221, 0xdd}], 0x4, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000016c0)=""/221, 0xdd}, {&(0x7f0000003700)=""/223, 0xdf}, {&(0x7f00000018c0)=""/11, 0xb}, {&(0x7f0000001900)=""/68, 0x44}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/100, 0x64}], 0x6, &(0x7f0000002a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/88, 0x58}], 0x1}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002dc0)=""/247, 0xf7}, {&(0x7f0000002ec0)=""/115, 0x73}], 0x2, &(0x7f0000002f80)}}, {{&(0x7f0000002fc0), 0x6e, &(0x7f0000003440)=[{&(0x7f0000003040)=""/200, 0xc8}, {&(0x7f0000003140)=""/167, 0xa7}, {&(0x7f0000003200)=""/20, 0x14}, {&(0x7f0000003240)=""/114, 0x72}, {&(0x7f00000032c0)=""/31, 0x1f}, {&(0x7f0000003300)=""/195, 0xc3}, {&(0x7f0000003400)=""/31, 0x1f}], 0x7, &(0x7f00000034c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x5, 0x40000000, &(0x7f00000036c0)={0x0, 0x989680}) getdents64(r2, &(0x7f0000000040)=""/9, 0x9) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2660.909014] loop7: detected capacity change from 0 to 40 [ 2660.942251] loop0: detected capacity change from 0 to 40 [ 2660.948899] loop5: detected capacity change from 0 to 40 [ 2660.966343] syz-executor.7: attempt to access beyond end of device [ 2660.966343] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2660.967458] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2660.975807] loop1: detected capacity change from 0 to 40 [ 2660.982785] loop6: detected capacity change from 0 to 40 [ 2660.985707] loop4: detected capacity change from 0 to 40 [ 2660.989001] FAT-fs (loop5): bogus number of reserved sectors [ 2660.989969] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2660.999999] FAT-fs (loop1): invalid media value (0x00) [ 2661.001081] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2661.001726] loop2: detected capacity change from 0 to 256 [ 2661.011995] FAULT_INJECTION: forcing a failure. [ 2661.011995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2661.013097] CPU: 1 PID: 14098 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2661.013671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.014251] Call Trace: [ 2661.014441] [ 2661.014615] dump_stack_lvl+0x8f/0xb7 [ 2661.014916] should_fail_ex.cold+0x5/0xa [ 2661.015237] strncpy_from_user+0x38/0x500 [ 2661.015550] getname_flags.part.0+0x95/0x4f0 [ 2661.015869] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2661.016206] getname_flags+0x9e/0xf0 [ 2661.016497] vfs_fstatat+0x77/0xb0 [ 2661.016761] __do_sys_newstat+0x81/0x100 [ 2661.017045] ? __pfx___do_sys_newstat+0x10/0x10 [ 2661.017373] ? perf_trace_preemptirq_template+0x272/0x410 [ 2661.017759] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2661.018177] ? syscall_enter_from_user_mode+0x21/0x50 [ 2661.018706] ? syscall_enter_from_user_mode+0x21/0x50 [ 2661.019169] ? lockdep_hardirqs_on+0x7d/0x100 [ 2661.019499] do_syscall_64+0x3f/0x90 [ 2661.019770] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2661.020130] RIP: 0033:0x7f85cf83cb16 [ 2661.020398] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2661.021604] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2661.022118] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2661.022596] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2661.023082] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2661.023557] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000001 [ 2661.024035] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2661.024534] [ 2661.078323] syz-executor.4: attempt to access beyond end of device [ 2661.078323] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.079244] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2661.178047] syz-executor.0: attempt to access beyond end of device [ 2661.178047] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.179141] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:39:39 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1802, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2661.200004] syz-executor.6: attempt to access beyond end of device [ 2661.200004] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.201233] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2661.237813] syz-executor.6: attempt to access beyond end of device [ 2661.237813] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.238842] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:39:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) linkat(r1, &(0x7f00000001c0)='./file2\x00', r3, &(0x7f0000000240)='./file1\x00', 0x400) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 13:39:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) 13:39:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 60) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_setup(0x2f82, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{}, {&(0x7f0000000180)="f3bff5ad87f7c465fd82ae6f963b70d76dd6641bb4988927b4c185f8dac6064f31e2f71989af39d49388be468baafc1bb5e4f2509e1458a3260b", 0x3a}, {&(0x7f0000000480)="a90bf45c7d4a65e5e19548c4706fe58944bda9e6d78c4232af98e690dfeb12fa3fd1daee59d73a53ae8a89b37a9d53b8b38efdf9144fdabe5f06bd07f34ca13813eca7232c6091606ca53d973a7a243bda8fe6080dae1c974f9463d125ca354e41cd9c190390ce198475adbcb0c9d17982681685a4d456315ec7806268107aef0b9aa2b6eec92ea2515cd2a88d1411f8ec5f87824c6fa0bedf521ed50e4d7d000c793536b165d9dfe6c22bd007526ee62356af62e203c56262113777f10988a10c91d77290512ff09602718413e9115c325983dd546f5a34231925c787b649bb87f8ea864fca71042577c88d9a", 0xed}], 0x3, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) [ 2661.302847] loop7: detected capacity change from 0 to 40 [ 2661.338965] loop0: detected capacity change from 0 to 40 [ 2661.341675] loop4: detected capacity change from 0 to 40 13:39:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) chdir(&(0x7f0000000000)='./file1\x00') dup2(r3, r2) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xfb, 0x5, 0x4, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x4, @perf_config_ext={0x63, 0x5}, 0xa200, 0x1000, 0x8001, 0x4, 0x81, 0x0, 0x20, 0x0, 0x5d5, 0x0, 0xd39a}, 0xffffffffffffffff, 0xf, r2, 0x0) [ 2661.408000] loop6: detected capacity change from 0 to 40 [ 2661.433136] syz-executor.4: attempt to access beyond end of device [ 2661.433136] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.435139] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2661.447052] loop2: detected capacity change from 0 to 256 [ 2661.468535] FAULT_INJECTION: forcing a failure. [ 2661.468535] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.470787] CPU: 0 PID: 14125 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2661.471823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.472878] Call Trace: [ 2661.473220] [ 2661.473532] dump_stack_lvl+0x8f/0xb7 [ 2661.474053] should_fail_ex.cold+0x5/0xa [ 2661.474613] should_failslab+0x9/0x20 [ 2661.475126] kmem_cache_alloc_lru+0x6b/0x760 [ 2661.475716] ? __d_alloc+0x31/0x9c0 [ 2661.476243] __d_alloc+0x31/0x9c0 [ 2661.476753] d_alloc_parallel+0x10e/0x1530 [ 2661.477342] ? __pfx___lock_acquire+0x10/0x10 [ 2661.477959] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2661.478569] ? lockdep_init_map_type+0x21e/0x7f0 [ 2661.479210] ? lockdep_init_map_type+0x21e/0x7f0 [ 2661.479852] __lookup_slow+0x193/0x470 [ 2661.480405] ? __pfx___lookup_slow+0x10/0x10 [ 2661.481013] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2661.481851] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2661.482672] ? lookup_fast+0x14e/0x530 [ 2661.483212] walk_component+0x345/0x5b0 [ 2661.483776] path_lookupat+0x1ba/0x850 [ 2661.484322] filename_lookup+0x1d2/0x590 [ 2661.484897] ? __pfx_filename_lookup+0x10/0x10 [ 2661.485559] ? find_held_lock+0x2c/0x110 [ 2661.486116] ? lock_release+0x3b6/0x750 [ 2661.486657] ? __might_fault+0xd9/0x180 [ 2661.487201] ? __virt_addr_valid+0x102/0x340 [ 2661.487793] vfs_statx+0x14c/0x430 [ 2661.488272] ? __pfx_vfs_statx+0x10/0x10 [ 2661.488801] ? getname_flags.part.0+0x1dd/0x4f0 [ 2661.489412] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2661.490041] vfs_fstatat+0x90/0xb0 [ 2661.490517] __do_sys_newstat+0x81/0x100 [ 2661.491031] ? __pfx___do_sys_newstat+0x10/0x10 [ 2661.491628] ? perf_trace_preemptirq_template+0x272/0x410 [ 2661.492339] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2661.493155] ? syscall_enter_from_user_mode+0x21/0x50 [ 2661.493793] ? syscall_enter_from_user_mode+0x21/0x50 [ 2661.494445] ? lockdep_hardirqs_on+0x7d/0x100 [ 2661.495051] do_syscall_64+0x3f/0x90 [ 2661.495558] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2661.496228] RIP: 0033:0x7f85cf83cb16 [ 2661.496727] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2661.498894] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2661.499814] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2661.500691] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2661.501548] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2661.502404] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000001 [ 2661.503266] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2661.504180] [ 2661.586832] syz-executor.4: attempt to access beyond end of device [ 2661.586832] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.588432] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:39:40 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) fcntl$dupfd(r0, 0x0, r0) openat(r2, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000700)={0x0, 0x14f, @start={r4, 0x1, "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", "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"}, [0x0, 0x80, 0x0, 0xc8, 0x3, 0x9, 0x3, 0xfffffffffffffffe, 0x5, 0x6, 0x4, 0x2, 0x100000001, 0x0, 0x800, 0xfffffffffffffffb, 0x23, 0x1, 0x1, 0x2, 0x10001, 0x6, 0x100000000, 0x1, 0x40, 0x9, 0x1, 0x36, 0xe5, 0x1, 0x5, 0x6, 0xf8, 0x100000001, 0x2, 0x5, 0xfffffffffffffc00, 0xab0, 0x2, 0x0, 0xffffffffffffffc1, 0xe4, 0x800, 0x1, 0x2b5c8e01, 0x1, 0x1, 0x7fff, 0x6, 0x5, 0x8, 0x0, 0x0, 0x3ce, 0xfffffffffffffd67, 0x1c9a, 0x8001, 0x7, 0x6, 0x0, 0x2, 0x5, 0x7b75a20e, 0x6]}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @none}, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 2661.630817] syz-executor.0: attempt to access beyond end of device [ 2661.630817] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.632748] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:39:40 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:39:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) [ 2661.844105] syz-executor.6: attempt to access beyond end of device [ 2661.844105] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.845991] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:39:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) chdir(&(0x7f0000000000)='./file1\x00') [ 2661.903094] loop0: detected capacity change from 0 to 40 13:39:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 61) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2662.034811] loop4: detected capacity change from 0 to 40 [ 2662.124047] loop5: detected capacity change from 0 to 40 [ 2662.133176] syz-executor.0: attempt to access beyond end of device [ 2662.133176] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2662.135079] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2662.139029] loop2: detected capacity change from 0 to 256 [ 2662.171400] loop1: detected capacity change from 0 to 40 [ 2662.181394] FAT-fs (loop5): bogus number of reserved sectors [ 2662.182585] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2662.189958] FAT-fs (loop1): invalid media value (0x00) [ 2662.190819] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2662.571725] loop7: detected capacity change from 0 to 40 [ 2662.581298] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value 13:39:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 62) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:39:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 13:39:58 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x80fe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:39:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x990a}}, 0x26001) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:39:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000042c0)=ANY=[@ANYBLOB="09f19a36"], 0x6) r4 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x6, 0x0, 0x5, 0x0, 0x8, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x6}, 0x8000, 0x7fffffff, 0xc9, 0x8, 0x2, 0x0, 0x3, 0x0, 0xfffffffb, 0x0, 0x1f}, r4, 0xf, r5, 0x1) r6 = dup3(r3, r2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x6, 0x3, 0xff, 0x80, 0x0, 0x1, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x48120, 0xffffffff, 0xfffffff7, 0x7, 0x3f, 0x9, 0x7fff, 0x0, 0x1, 0x0, 0xbdb}, r4, 0xd, r6, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2679.882533] loop0: detected capacity change from 0 to 40 [ 2679.885254] loop2: detected capacity change from 0 to 256 [ 2679.890679] loop7: detected capacity change from 0 to 40 [ 2679.892804] loop4: detected capacity change from 0 to 40 [ 2679.903746] loop1: detected capacity change from 0 to 40 [ 2679.904184] FAULT_INJECTION: forcing a failure. [ 2679.904184] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.904855] loop5: detected capacity change from 0 to 40 [ 2679.906177] CPU: 0 PID: 14171 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2679.907791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.909114] Call Trace: [ 2679.909468] [ 2679.909847] dump_stack_lvl+0x8f/0xb7 [ 2679.910364] should_fail_ex.cold+0x5/0xa [ 2679.911044] ? getname_flags.part.0+0x50/0x4f0 [ 2679.911647] should_failslab+0x9/0x20 [ 2679.912297] kmem_cache_alloc+0x5a/0x410 [ 2679.912988] ? lockdep_hardirqs_on+0x7d/0x100 [ 2679.913601] getname_flags.part.0+0x50/0x4f0 [ 2679.914311] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2679.914929] getname_flags+0x9e/0xf0 [ 2679.915526] vfs_fstatat+0x77/0xb0 [ 2679.916005] __do_sys_newstat+0x81/0x100 [ 2679.916663] ? __pfx___do_sys_newstat+0x10/0x10 [ 2679.917265] ? perf_trace_preemptirq_template+0x272/0x410 [ 2679.918145] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2679.918902] ? syscall_enter_from_user_mode+0x21/0x50 [ 2679.919708] ? syscall_enter_from_user_mode+0x21/0x50 [ 2679.920367] ? lockdep_hardirqs_on+0x7d/0x100 [ 2679.921168] do_syscall_64+0x3f/0x90 [ 2679.921662] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2679.922505] RIP: 0033:0x7f85cf83cb16 [ 2679.922985] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2679.925814] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2679.926747] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2679.927835] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2679.928960] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2679.930086] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000002 [ 2679.931217] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2679.932375] [ 2679.937849] FAT-fs (loop1): invalid media value (0x00) [ 2679.938604] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2679.945362] FAT-fs (loop5): bogus number of reserved sectors [ 2679.946155] FAT-fs (loop5): Can't find a valid FAT filesystem 13:39:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x3c, &(0x7f0000000080), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmmsg$sock(r2, &(0x7f0000009400)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000300)="7b4af9c9b117b9340f8c57e709675c7fcc11dd7530d1ac0c104002890467becc2344dbf1767e06bb4644f0db05fb8d826937ff39457cef465a921b8a1daba7d86123328b18c529f541b378adbc482ca7d5e56de92f0fb2fbcdd00dab9aeeb0e6e45ce05add35a2ae45028804fd", 0x6d}, {&(0x7f0000000380)="ecdc3c1836d64089cde043f80963cf44ce74e88656aefb163d641fb3acd20f120059a134c3b09caa8a76a8f9ec68124dddca41b4509bf4ef00e0d6d295a51d75c2cf41bf778f823b2e372cd1b0b106db1323a34934f4f7a3e82a105154c5470c78432314ddf6b857d79435ab06270ce2f84bd705bf8c3dd47cd68b14fc3d07b9192dca50c889d75cce3edc25c00c16299711b9c75bc7ed2e979b100e3e38b06e5e4ae36f6a19544d071e46f3b7a14565dc3dcc6be41b", 0xb6}, {&(0x7f0000000440)="01680b1a2865d1399866c6a4f74dd5a7a5f336466b1b4955f0c888359d600c0d91e304cac6e7a1bc0f14f5f3aed183758934a34c940a1c5d0574b7054d8fbad8c1e02704ef409d9e6351b58dfebc96a82a56152c2a05281669d9a1655e07ee6f9ff6f6d92702d1ff361d7f5ccbd915d3970fdaedab204065f2b2c2fae4dff89ef3581adca5ae3eace6a2b4e5af1feddc12b5c8395189b3aab925d9917334c43ff6354950b3d248c123284f43309eb4b24297d997a0", 0xb5}, {&(0x7f0000000500)="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", 0x1000}, {}, {&(0x7f0000001500)="cb0accf23207ddf430cced4a7730d9c24afbc93d3d31737ec75181b5eb18c038ed7f3af9891f7f0ac33074ec7faac2297c1c537fc6f13af14e01b39c8b6c8b1ef78b24b79d7d7aa9220f9bef", 0x4c}], 0x6, &(0x7f0000001600)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xa0}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}], 0xa8}}, {{&(0x7f00000016c0)=@l2={0x1f, 0x1, @any, 0x3, 0x46494342bb972edf}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000240)="1b02f6ac82235849543e3ac094c1fce22a4efb53863ddf01f6310b68893ce897", 0x20}, {&(0x7f0000002740)="6b7cfdb587922817cfebda394d57ecc8e09c54cd771e730eca4bd5a81527b1caec70d3c1bb0ad80fb9308b9d15fd17f8b56e72bea88757624b970487fb2d7e8565231412ca2bf9e031f0564df14907e6ab1b1c2d7b3436bca00e33a456cbbeeee318067c4c8a2fff93aa9e93831f4567171185527d6ca571fbfce96e1fa1dbe3759db8fe5aa6f67d2adcd6d2569d9a5eae4f3b93d7a65c28797baff0802812a641a6c96a019f64dac80cd54df0ed0f0d77ce54af441ceae596ba894fb02b3ad64ed9", 0xc2}, {&(0x7f0000002840)="77e91d115bc56f923d60f6c513c43b2675c1f8e141d3ba61f5c78d9cff58acc9e3a0a98bdd3822f2336e72c195a1a159aa130da00cd3c026b92043c520ee2caedd8aaec2cc412de3d49d040b0c54764210419d11a3c3", 0x56}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="bb04087a127f0833b0ca09e20972395296e1dacbd23b8c77b4dd06d3e72998fd20c092a587e875c344489c48658c1f0917d56ed3dddb4f5c97c6a65e80a1e18d111516eaeb0e10883d52cdef54d4a3db52b0395348cede57806d7d0626f356e4d566ed28b834eb180aa9e2427d96b4d2a454c614e270e2ce309a9e0b686663d4d0ea77e6404b358e63e9a58b3ce983baac3ef0c91a78bfdea8ec9679fa11deb57822c7f3d1161e966ba4cdf53b1c32f6e8fe45c80da1f75c68537228f29e3a3aedbae16cd9a31a546eebd874798f72df3fc5fc3ced5fc6048d81334200", 0xdd}, {&(0x7f00000039c0)="934e0b04c356860ea76970d02a1eb04c9a8c51c25d3aa8a2c4c00f979f8e68e3b180d17c187270aca53e264c3165510404ec4e2ea33049366df1227fd6e2652555058dd3b1b85d6f5aa2ee9e0876225d891c3e6eef8817569a6d917b7c6f71539c662e45fdc3958ddd12ca9ab9593ed683d9d3da42272514bd396303d77c9c08762e7d23eedeb3044aa942817d1d07e142af0fda11db1a96ad24197b87aa", 0x9e}], 0x7, &(0x7f0000003b00)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xd65}}], 0x48}}, {{&(0x7f0000003b80)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003c00)="97b45c240493046dbdb0a452f0a91e5599133611f4ab8684f068a551acd72685b7175105ce35eb845beb2273951e7a4d3f4a7dae988cc3edc6dc81fa3a1047552eeec3a36ef2033415760f2882ab9c1ad325861bcec8a8e58a31560d5f24e74159bd26385f6a9f1b085e451dab06ed0f3a9aa5769379ab", 0x77}, {&(0x7f0000003c80)="1f60950f77d88437f9ce2fcf833547419ff653678d438196196d9cb3420911fc982163dd10eb06ac0f1bd46a394a139743c8a77d95291c4469570100ab5a2aa6808d3ca9167d69dda024d44887f3f97797a4687c480655c208c85301ae6da44e0c594e48cc8ca2789d543a0c109e60251f51c29db8697952c0d266d9a305d637882ec252f31204f61c2f99a3cac194eaeb4ef25e03b6e6c74cc5256f5e129a90100b92882146b332822ed0495e247d4f8ce455193484afb1937d6d1381bc1127541a4448a947086ae14d3610a4133b584748", 0xd2}, {&(0x7f0000003d80)="f7ee904527c516f85ce99cd4cdbe145b40d1220465f2c5838d9e655ba288e36be65f2220898a52e280ec5206d2f7c96a45d4d297a7a31b7425945106fb96ae15a8072679dfbafa80729c6c1699e530f140a5ecffd0f729440c20a75ef3eae6cc857b8fa7e1af6a1d4712e03fa09244b9ad192da8c3f3df0e7cea7306a039e1113953e4e77e55bca92e428bb4cb19ade68ab1ee7c0d1fd1730cd0d05e4086b9111b073cd4513a71946602c122dade37dfbf25ee0d69f21ff02dc0b1735547a98b98119fe1e232a9857a87ade7f1ae9c1fdd3610d2a8193e43b7781375b175ff2cda69aebdf3", 0xe5}, {&(0x7f0000003e80)="bb5102e7e87ac314d52dcc948386af3b32c3658961397d31d213b792ffbb0df2d75f", 0x22}, {&(0x7f0000003ec0)="7b14477cab4ab54abaca83b60d8eeec576dc69f4540833f811794973f543b60779af6922feb027efbf76d73d6c0fc69cf17116aa905180303466083a02154b400bde034396cbcae8d2bd2f95e8ab959845824bc5652b07cd989f0fcf3e77b4be17d1282643a1c7064c4f8525a657fdeba77f53f347bfa33b3c9ebecc4f09d39bb0b1b995704db3174dd8f2f16fe2810833a6f06821cb5b18c161db850868f2c11e97a418c71658a9bb74bca8fd458aca577461fc038e450e6a9e791ad4413eafff5e26f475b1c4b62bba9c7ef21e514f6df7a374a03ed926a9c7abe805846c", 0xdf}], 0x5}}, {{&(0x7f0000004040)=@qipcrtr={0x2a, 0xfffffffffffffffb, 0x7ffe}, 0x80, &(0x7f0000004140)=[{&(0x7f00000040c0)="29b4126a4b944bb42c8f36c92fe62ca286cf86c14a483f3e7fca2e43f80fdbb919dc1e461d9a804e97231d27d7360442709dc6c381280b21ae3418d3922e95024032e964c1290be49ab91f14719eb641d8794392495dc610f0d6f1d4", 0x5c}], 0x1, &(0x7f0000004180)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x78}}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x1, @empty, 'ip6erspan0\x00'}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004280)="c5df664656b0c4521d56056a4ac559c1bcea090000004a8e5d867b673824e69655209b5342066efc", 0x28}], 0x1, &(0x7f0000004300)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}], 0x90}}, {{&(0x7f00000043c0)=@xdp={0x2c, 0x2, r5, 0x32}, 0x80, &(0x7f0000005440)=[{&(0x7f0000004440)="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", 0x1000}], 0x1, &(0x7f0000005480)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x14000}}, @txtime={{0x18, 0x1, 0x3d, 0xf8}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x60}}, {{&(0x7f0000005500)=@sco={0x1f, @none}, 0x80, &(0x7f0000005680)=[{&(0x7f0000005580)="0ed70b967fb660bc396474b6eef609e75ed9a8c2d6db4da2ef609f786bb20fa39f5024fba287b111c416e2d18a9d4ba85ff4954daac0d5a4621ca65df8f8b6ae3e0d782ccdf994df8b5627a1415848ad571b99cfde7bd9a23e0c6ae9c02c8522b5ad8935ea3cc02acbff026d13dbdf61e43ea336523e99f06e309e173720bc0c8a7e677f4e73083b5371516b988cf82feb22da1d97f4f48bf5592a97ac67b60dde997530766d1f6e0372cc7785edb5da88b1f0511dbcb447fab7dd04c2a620534415207efff3c2b2dffa31018f714a0ec926dcf776b760a89f3ab69dc8c4ef598bdafece", 0xe4}], 0x1, 0xfffffffffffffffd}}, {{&(0x7f00000056c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000007b80)=[{&(0x7f0000005740)="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", 0x1000}, {&(0x7f0000006740)="1678c3bce64016c4e1b7629529d700578af0a9f43ea526116d2a7f67667aa496c20c8042a02c5561a40515d7a37056ae3ff97c39dd4fcbdfefcc86b12d80d5ba6ad75987c16e47356266c55072303bc6cfab8fb95d81a2fd448b41880cdf9a50b55ce5bac3b356b91344b12c1e36e0361e21d08358219e38f70a06a735600bf1fbb4194da4a14c4787cb2179a2870705772893cb4bbda4eca6e02dc6cae1556a02fff973162cabb1cadd4447c2677bb01377abb3fe60fc021d6713cd5139ec3a7f33d79cb2ae5150e7b7efc891", 0xcd}, {&(0x7f0000006840)="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", 0x1000}, {&(0x7f0000007840)="30ec8099970d05082df0c0207c3b5c28526da879310348d9091f8b75ebed73799c4074af2249551428dcf806fa4dd9d05888695cfe930d40a9498f695973aca1a9ccb176ab4d6cf9d794919de959f6384380889012bad82f72c22b8643af7fc05d60e3659b828d1938a0384446fe457104ca864cb6dc8f9f32ec9a241a35df5201116fff9b6dbaa870d3cff6eab0e59d8e56d7ca2b086812ff58ba5e15077a7ca5a8d5af891da1209ecdb31502", 0xad}, {&(0x7f0000007900)="b7c9d0459177df65b5d4b7be6c86f5385ae77a0d21388bac763ba80b8b77679239209e46a9cee0744d198d6b1ec6359eeab9e904688838e10e6c753fe35b2b0a94887e89e31b6072baf66683c11bca0c49b8837dbcd9ed22f6cc5edc91c8b9f00087a9a261fa8ba8d941ca746c0aac5ee101111cf1a5923caecc3e12a2f9055da8e2df929bcb4dfaf132da281b5a382c7b30f4b7ee06d004f4b8dc811a4e15a75d37702607db11a1096a4f72798043f4b6d04692462dd2abc0caf65fecf275bd5530d2d7e3438fb5f6ba3eed42d216eacf35dc7016ee5e17a43c488f3162869e71ad3e", 0xe3}, {&(0x7f0000007a00)="6a19147cf966c0ef67bf4cf0f5b0f15a1d03c0185baa6b45e890cb4de3a09ee69830f1aa29160fb25a3bd316fd0e904b2a18586ea3c5ddfa00e2001f16a469788a175af78e0e9df0d8bae0d4dcbf44d3296f0f663791812e6200f521ada59ae6fd07449d90dee1efe695f50ab78005af62f1abc710d6892b1e0087229dabc6d3aa429fd4f8d69490ac8e1e1abdaab814b4c707f102d7f8f998c49c356e98ed1bc6f9ebe02c86a36f92a8c4d9854dca974a3f38f427d5ddd31e3e9457", 0xbc}, {&(0x7f0000007ac0)="2c8bd9241159f869fffb4693ded007330ce43e91ca8bcbaed6a895625f4977958e07dbca4b40e24d5f6c12fdcae0f5213958b892eec0383b1ba36f723891db03232f076034a5a102de032f6a2324eaac04b542aea519e3bfb728aa40d480076bca898fc6ec9f9f5aea0545f1aeb27e222bffd1d12aee701555235e055963b3eb20", 0x81}], 0x7, &(0x7f0000007c00)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5e6}}, @mark={{0x14, 0x1, 0x24, 0xdbd}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff80000001}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xc9e}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}], 0xf0}}, {{&(0x7f0000007d00)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000009140)=[{&(0x7f0000007d80)="bd606779998901e0955d219d2d98827e8639d72126fdd465601f0fe1cf792731436368692a0904369f77e8f0a8df67f617d4b91f6e4f82a683edeac022effbce3d803202bfb4bd805c3ff7d65a348a97737b3b1d28cbb5a8095de2dc53bd15f4dc5c7bc16f3449eb6c17dc9373471f9f66f080e1d42724bf3db5bff018856166db492bc6bda5bfacfd18936302acdf7b8667c7343d754959bd4c8b92cfa85b75c48696c2b2e1f58b0f1730432c3f", 0xae}, {&(0x7f0000007e40)="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", 0x1000}, {&(0x7f0000008e40)="5021d10407a6ca0c06bc2fc5e13410e4afb62a2e28c02ed19f4c320455e58aad1fdde4d3e44ce5acb358a9c7eedfb6c8bf3c220aa44e7772daf9066b2a8c52ee3b21f09cc9eb9ceb9ec150e41fed9932f70536d2b263bb53f94ef44901dedae232d57b815ae23739cf2cd900ea12731d8d5d3054c44d45a1b7d9c0f7e65e8001267d4a8b471b5334bf3508b8decabd406d2b312385b3fb641dd78b794dfcf01080d71f782fc87d86263529e60c43154edc59717ffcc7722447a584fa5245fa6730268d9452f118f41ec1817bd08e3a54f522ac770aa45d4078032df47b47fb22613cd965b7d12554ccdc6fdb0b38", 0xee}, {&(0x7f0000008f40)="a27d2a49eb72869fc939126499137ef4363dd83244621ce3854355b7c08deca35edc06fd321da7b1bcc14ecdda94c78f7b2aff294f4d8d7a2f8f19c246637de166b4d7a9cd524461e529b2547f4892ec68a99d6cd392cad8019dae116479ae0b1f2f13fcab58d3f066a172729760863b75136bcfafc0d11639886bc7b78e68a94617c2af92bfd371e7d80413dc48ae7f13af3b495ca193c2", 0x98}, {&(0x7f0000009000)="e3d5e5c7eb1eb6c06845240fa966b707a40653b3642f1db01c4b10ec077839d83af87e56b4b01a3a4bce938ae5b4c3c10c9afc3e1154fadaf713281b30db52f5ccc21bbc5d7390996b4f7fb029ffdd09bfe7458c54e7d47e7669c656d68d35de80dbdfdbdeeee4457d", 0x69}, {&(0x7f0000009080)="5ab9244807d1f91847c4b4df18b789d70ba003c224d69b8eb7df3d09494cac1365feca58e011b91e66b69a13105f025da6c96a1d1dd0207c4c5bec5099b5a2191973dd71ad4a1985c3e5446944b70a9d220f443aed4c3aea88d11bedf687834230f34fcec34e53cad0dc2337b9c7b85e90202b83a6827b0f3d65a33c2bfd805f1d483dde515164ae468e19fb0f953e722b1aaec7e4caa407eb", 0x99}], 0x6}}, {{&(0x7f00000091c0)=@llc={0x1a, 0x118, 0x80, 0x40, 0xff, 0x3, @local}, 0x80, &(0x7f0000009380)=[{&(0x7f0000009240)="fcc23bb714dab02c3031751d820862b7bfb4add47fb8899b42a9be283db5dff4f1d238544cc34239a7ffd7b4bf843fe532b8bcd47c28b2b8860a", 0x3a}, {&(0x7f0000009280)="cde42d620782db71ec60b3fe67140dfbc338cf84a0308c1c20d572b843b1a68bdbd07c8f9b55071f3dcbb444738ffb6140cad4e67a9be71b66af40122da5b86d9f7a61d3bee56419f281b826c0a321bf096ff5884ee9aa2d64b128400f8d55b73eaa675c21a9d400cb2e21c5a94e3159a3", 0x71}, {&(0x7f0000009300)="49068e503af628ade32169d76f691a516ff85e3b4a0a8a6765cd8c798bfb8fad620025b5cf4615fa65c3c962d99f5755cd02462c5c916f943f8a271c8ba67c2a78defe6fe3cf3f18efb72b04d82129726bbd6e56c573c1cc06d17fd3aab444c36889f2467d83f643f2e107dc55794a8fc3c889", 0x73}], 0x3, &(0x7f00000093c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0xa, 0x800) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x7, 0x3807}, 0x0, 0x6, 0x2000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r6, 0x3, 0x8b03) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:58 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xc0fe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2680.291018] FAT-fs (loop6): bogus number of reserved sectors [ 2680.291914] FAT-fs (loop6): Can't find a valid FAT filesystem 13:39:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 63) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2680.384953] bio_check_eod: 1 callbacks suppressed [ 2680.384989] syz-executor.7: attempt to access beyond end of device [ 2680.384989] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2680.387877] buffer_io_error: 1 callbacks suppressed [ 2680.387901] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2680.466056] loop2: detected capacity change from 0 to 256 [ 2680.466083] syz-executor.0: attempt to access beyond end of device [ 2680.466083] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2680.468820] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2680.501276] FAULT_INJECTION: forcing a failure. [ 2680.501276] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.503171] CPU: 1 PID: 14192 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2680.504231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.505293] Call Trace: [ 2680.505633] [ 2680.505976] dump_stack_lvl+0x8f/0xb7 [ 2680.506566] should_fail_ex.cold+0x5/0xa [ 2680.507135] ? getname_flags.part.0+0x50/0x4f0 [ 2680.507906] should_failslab+0x9/0x20 [ 2680.508417] kmem_cache_alloc+0x5a/0x410 [ 2680.508969] ? lockdep_hardirqs_on+0x7d/0x100 [ 2680.509611] getname_flags.part.0+0x50/0x4f0 [ 2680.510230] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2680.510902] getname_flags+0x9e/0xf0 [ 2680.511429] vfs_fstatat+0x77/0xb0 [ 2680.511907] __do_sys_newstat+0x81/0x100 [ 2680.512471] ? __pfx___do_sys_newstat+0x10/0x10 [ 2680.513121] ? perf_trace_preemptirq_template+0x272/0x410 [ 2680.513862] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2680.514664] ? syscall_enter_from_user_mode+0x21/0x50 [ 2680.515349] ? syscall_enter_from_user_mode+0x21/0x50 [ 2680.516029] ? lockdep_hardirqs_on+0x7d/0x100 [ 2680.516678] do_syscall_64+0x3f/0x90 [ 2680.517186] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2680.517875] RIP: 0033:0x7f85cf83cb16 [ 2680.518358] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2680.520633] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2680.521611] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2680.522497] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2680.523414] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2680.524322] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000002 [ 2680.525259] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2680.526206] 13:39:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 13:39:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r2, &(0x7f0000000180)=0x3, 0xfffffffffffffffa) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) [ 2680.801119] loop7: detected capacity change from 0 to 40 13:39:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:39:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2680.907271] loop0: detected capacity change from 0 to 40 [ 2680.935032] loop5: detected capacity change from 0 to 40 [ 2680.949219] FAT-fs (loop5): bogus number of reserved sectors [ 2680.950083] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2681.069136] loop2: detected capacity change from 0 to 256 [ 2681.133028] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2681.171091] syz-executor.7: attempt to access beyond end of device [ 2681.171091] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2681.173159] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2681.228671] syz-executor.7: attempt to access beyond end of device [ 2681.228671] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2681.232797] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2681.260956] syz-executor.0: attempt to access beyond end of device [ 2681.260956] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2681.262948] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2695.461828] loop6: detected capacity change from 0 to 40 [ 2695.464925] loop0: detected capacity change from 0 to 40 13:40:13 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r4, &(0x7f00000001c0)='./file0\x00') renameat(r4, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) fsmount(r4, 0x0, 0x70) r5 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r5, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x9) 13:40:13 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe300, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:40:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) 13:40:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 65) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:40:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=@ocfs2={0xc, 0x1, {0x1, 0x40, 0x4}}, &(0x7f00000001c0), 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 13:40:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2695.469142] loop7: detected capacity change from 0 to 40 [ 2695.478793] loop1: detected capacity change from 0 to 40 [ 2695.481972] loop5: detected capacity change from 0 to 40 [ 2695.486894] FAT-fs (loop1): invalid media value (0x00) [ 2695.487279] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2695.501975] FAT-fs (loop5): bogus number of reserved sectors [ 2695.502822] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2695.535464] syz-executor.7: attempt to access beyond end of device [ 2695.535464] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2695.536282] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2695.542085] loop4: detected capacity change from 0 to 40 [ 2695.547162] loop2: detected capacity change from 0 to 256 [ 2695.577344] FAULT_INJECTION: forcing a failure. [ 2695.577344] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.579385] CPU: 0 PID: 14232 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2695.580531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.581696] Call Trace: [ 2695.582081] [ 2695.582419] dump_stack_lvl+0x8f/0xb7 [ 2695.582999] should_fail_ex.cold+0x5/0xa [ 2695.583619] should_failslab+0x9/0x20 [ 2695.584194] kmem_cache_alloc_lru+0x6b/0x760 [ 2695.584861] ? __d_alloc+0x31/0x9c0 [ 2695.585431] __d_alloc+0x31/0x9c0 [ 2695.585978] d_alloc_parallel+0x10e/0x1530 [ 2695.586625] ? __pfx___lock_acquire+0x10/0x10 [ 2695.587318] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2695.588020] ? lockdep_init_map_type+0x21e/0x7f0 [ 2695.588728] ? lockdep_init_map_type+0x21e/0x7f0 [ 2695.589477] __lookup_slow+0x193/0x470 [ 2695.590060] ? __pfx___lookup_slow+0x10/0x10 [ 2695.590719] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2695.591647] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2695.592564] ? lookup_fast+0x14e/0x530 [ 2695.593170] walk_component+0x345/0x5b0 [ 2695.593783] path_lookupat+0x1ba/0x850 [ 2695.594404] filename_lookup+0x1d2/0x590 [ 2695.595035] ? __pfx_filename_lookup+0x10/0x10 [ 2695.595760] ? find_held_lock+0x2c/0x110 [ 2695.596410] ? lock_release+0x3b6/0x750 [ 2695.597042] ? __might_fault+0xd9/0x180 [ 2695.597674] ? __virt_addr_valid+0x102/0x340 [ 2695.598346] vfs_statx+0x14c/0x430 [ 2695.598891] ? __pfx_vfs_statx+0x10/0x10 [ 2695.599484] ? getname_flags.part.0+0x1dd/0x4f0 [ 2695.600182] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2695.600905] vfs_fstatat+0x90/0xb0 [ 2695.601452] __do_sys_newstat+0x81/0x100 [ 2695.602066] ? __pfx___do_sys_newstat+0x10/0x10 [ 2695.602759] ? perf_trace_preemptirq_template+0x272/0x410 [ 2695.603585] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2695.604470] ? syscall_enter_from_user_mode+0x21/0x50 [ 2695.605247] ? syscall_enter_from_user_mode+0x21/0x50 [ 2695.606003] ? lockdep_hardirqs_on+0x7d/0x100 [ 2695.606695] do_syscall_64+0x3f/0x90 [ 2695.607262] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2695.608010] RIP: 0033:0x7f85cf83cb16 [ 2695.608568] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2695.611107] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2695.612188] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2695.613213] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2695.614206] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2695.615214] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000002 [ 2695.616205] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2695.617248] [ 2695.647756] syz-executor.0: attempt to access beyond end of device [ 2695.647756] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2695.648850] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:40:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) [ 2695.788249] loop0: detected capacity change from 0 to 40 13:40:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 66) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x1}, {0x0, 0x0, 0x2800}, {&(0x7f0000000300)="6515423f1c929f63baf79d826ec3b6abde6040a06ec314dc62f1d810198db0ada4a8cfd7b27a39a46c28e9c94b5c72db7ab864b98ec5b320af0bd9e6c02665bd3b43c782eeca54dba940efde2cb3467ef7afb4da67796120e796e9f26ad3a6bb0071bd261adabe8d9e882cbd57ca3caff062d23be7b861b87e6758d04564bb1ab039aa0cd9b38eb610262fe3d3878c684861618f84b980ee4d7ebbb24d544d8af4f06a3e3295ab5afac2765f82c66eaa9d09be77d308644fe6a6d762fb9dd5efc093ae1846c6233f8fc288b9ebfbbfcea29a167bd39a19466fc512", 0xdb, 0xe6}, {&(0x7f0000000000)="b4251da9f7915b3aa89438d4d90137c32349328a654ecc2c6ac93759bbaf42f1c6468549f1eefe59331514c88a", 0x2d, 0x3b}], 0x410, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000200)='{@:)\x00', &(0x7f0000000240)='./file1\x00', r1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) faccessat(r0, &(0x7f0000000440)='./file0\x00', 0x68) 13:40:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1/file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:40:14 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfc00, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2695.917005] syz-executor.0: attempt to access beyond end of device [ 2695.917005] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2695.918242] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:40:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 2695.978225] syz-executor.4: attempt to access beyond end of device [ 2695.978225] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2695.980490] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2696.026804] loop7: detected capacity change from 0 to 40 13:40:14 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfe80, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2696.039136] loop6: detected capacity change from 0 to 40 [ 2696.055191] FAT-fs (loop6): bogus number of FAT structure [ 2696.055913] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2696.063585] syz-executor.4: attempt to access beyond end of device [ 2696.063585] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.064703] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2696.070047] loop2: detected capacity change from 0 to 256 [ 2696.160317] loop0: detected capacity change from 0 to 40 [ 2696.352185] syz-executor.0: attempt to access beyond end of device [ 2696.352185] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.353332] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:40:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffdf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180), 0x2, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2696.394566] loop4: detected capacity change from 0 to 40 13:40:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 67) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 2696.462204] syz-executor.4: attempt to access beyond end of device [ 2696.462204] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.463101] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:40:14 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfec0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2696.506667] loop0: detected capacity change from 0 to 40 [ 2696.508126] syz-executor.7: attempt to access beyond end of device [ 2696.508126] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.510703] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:40:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2696.621750] syz-executor.0: attempt to access beyond end of device [ 2696.621750] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.622975] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:40:15 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xff00, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:40:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 13:40:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) chmod(&(0x7f0000000000)='./file1\x00', 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2696.698421] loop5: detected capacity change from 0 to 40 [ 2696.699916] loop1: detected capacity change from 0 to 40 [ 2696.701914] loop2: detected capacity change from 0 to 256 [ 2696.714808] FAT-fs (loop5): bogus number of reserved sectors [ 2696.715683] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2696.717884] FAT-fs (loop1): bogus number of FAT sectors [ 2696.718695] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup(r0) openat(r2, &(0x7f0000000240)='./file1\x00', 0x2c4c00, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="0100f03fdf947e06ba3d0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000b97c56b50000002e2f6669"]) openat(r3, &(0x7f0000000040)='./file1\x00', 0xa220, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3a185000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0) fsmount(r4, 0x1, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f00000001c0), 0xfff, 0x2a0000) close(r5) sendfile(r4, r1, 0x0, 0xfffffdef) [ 2696.766318] loop0: detected capacity change from 0 to 40 [ 2696.779232] loop4: detected capacity change from 0 to 40 [ 2696.833119] loop7: detected capacity change from 0 to 40 [ 2696.855279] syz-executor.4: attempt to access beyond end of device [ 2696.855279] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2696.856186] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:40:15 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2696.903377] loop6: detected capacity change from 0 to 40 [ 2696.922779] FAT-fs (loop6): Unrecognized mount option "{@:)" or missing value 13:40:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 68) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 13:40:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x8, 0x6, 0x8001, 0xfffffffffffffffb}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) ftruncate(r3, 0x0) 13:40:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:31 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2712.811431] loop1: detected capacity change from 0 to 40 [ 2712.813155] FAT-fs (loop1): bogus number of FAT sectors [ 2712.813683] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x1410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x488082, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x38, 0x328, 0x70bd26, 0x25dfdbff, {0x5}, [@nested={0x54, 0x34, 0x0, 0x1, [@typed={0x14, 0x96, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x60, 0x0, 0x0, @uid}, @generic="b9059fa171f7d148099e999a768e14a34bbc34f2e5e8f0a08bf7827049e1d94c", @typed={0x8, 0x79, 0x0, 0x0, @fd=r1}, @typed={0x9, 0x55, 0x0, 0x0, @str='vfat\x00'}, @generic]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0xa9b25a39e849eea2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0xf048175c3b6f0a2, 0x7, 0x8, 0x6f, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x65, 0x0, 0x1, 0x4, 0x0, @broadcast, @remote, {[@noop, @ssrr={0x89, 0x7, 0x17, [@remote]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x36, r5}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x3c, &(0x7f0000000080), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) lseek(r0, 0x10000, 0x4) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3f, 0x2, 0xa3, 0x0, 0x0, 0x5, 0x12000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x1, 0x7fffffff, 0x8000, 0x9, 0x9, 0x80000000, 0x7f, 0x0, 0x2, 0x0, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2712.863188] loop7: detected capacity change from 0 to 40 [ 2712.867363] loop4: detected capacity change from 0 to 40 [ 2712.914188] loop5: detected capacity change from 0 to 40 [ 2712.922100] loop6: detected capacity change from 0 to 40 [ 2712.938990] loop0: detected capacity change from 0 to 40 [ 2712.945907] FAT-fs (loop5): bogus number of reserved sectors [ 2712.947066] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2713.024986] loop2: detected capacity change from 0 to 256 [ 2713.403260] bio_check_eod: 2 callbacks suppressed [ 2713.403286] syz-executor.7: attempt to access beyond end of device [ 2713.403286] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2713.406973] buffer_io_error: 2 callbacks suppressed [ 2713.407031] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2713.443286] syz-executor.0: attempt to access beyond end of device [ 2713.443286] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2713.446041] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2713.462392] syz-executor.6: attempt to access beyond end of device [ 2713.462392] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2713.465119] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2713.566030] syz-executor.6: attempt to access beyond end of device [ 2713.566030] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2713.567957] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2713.708758] loop4: detected capacity change from 0 to 40 13:40:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="a5dfbf6d8720f61337264e9e5f234a7e789cd3b3db3f362f1cbc92ed6602cf28f0c3b6e33d2ae73ca2a7e1942f40e50b38a07676da98bfe64e4549b684beb2557c5cfe2ebd2d7f6f353695e7d5a95fa3c95f881fb4b7e2e6b74c934ef057", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1731}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:40:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 69) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x200000) socketpair(0x3, 0x1, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$KDMKTONE(r2, 0x4b30, 0x6) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 13:40:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={r2, 0x81, 0x0, [0xfffffffff5119458, 0x81, 0x7, 0x5, 0x9], [0x0, 0x3, 0x3ff, 0x400000000000, 0x2, 0xfff, 0xffffffffffff3cd9, 0x3, 0x1f, 0xffff, 0x7, 0x40000000000, 0xfffffffffffffffb, 0x1, 0xa, 0xc52, 0x3, 0x3, 0x9, 0x40, 0x810000000000000, 0x80000001, 0x8, 0x2, 0x7, 0x4, 0x10004, 0x3, 0xffff, 0x8, 0x8, 0x1, 0x0, 0x7, 0x200, 0x3, 0xffff, 0x3, 0xfffffffffffffffe, 0x100000000, 0x8, 0x4, 0xa7b, 0x1785, 0x20000000000000, 0xa9cb, 0x53ee, 0x8, 0x7, 0x3, 0x800, 0x81, 0x6, 0x8001, 0x20, 0x5, 0x5d, 0x1, 0x4, 0x2, 0x1, 0x603212ab, 0x80000001, 0x7f, 0x8, 0x9, 0x4, 0x5, 0xfffffffffffffffe, 0x9, 0x2, 0x1000, 0x3, 0xda22, 0x4, 0x5, 0x8a2, 0x7fffffff, 0x6, 0x4, 0x4, 0x2, 0x1f, 0xb84, 0x2, 0xffffffff, 0x7ed, 0x5, 0x5, 0x3f, 0xab4, 0x40, 0x8, 0x1, 0xee, 0x1, 0x5, 0x10001, 0x9, 0x10000, 0x5358, 0x3ff, 0x6cf0, 0x7, 0x9, 0x2, 0xff, 0x0, 0x10001, 0x4, 0x200, 0x589, 0x1, 0x4c729bef, 0x5, 0x401, 0x0, 0x7f, 0x0, 0x2]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0xd2da, 0x18d482) recvfrom$unix(r3, &(0x7f0000000300)=""/244, 0xf4, 0x40010001, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x42) sendfile(r1, r0, 0x0, 0xfffffdef) sendfile(r4, r0, &(0x7f0000000180)=0x8, 0x6) 13:40:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:40:47 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2728.740216] loop1: detected capacity change from 0 to 40 [ 2728.748030] loop2: detected capacity change from 0 to 256 [ 2728.756994] FAT-fs (loop1): bogus number of FAT sectors [ 2728.757399] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2728.759863] FAULT_INJECTION: forcing a failure. [ 2728.759863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2728.760888] CPU: 0 PID: 14353 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2728.761405] loop4: detected capacity change from 0 to 40 [ 2728.761864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.762436] Call Trace: [ 2728.762627] [ 2728.762796] dump_stack_lvl+0x8f/0xb7 [ 2728.763089] should_fail_ex.cold+0x5/0xa [ 2728.763405] strncpy_from_user+0x38/0x500 [ 2728.763722] getname_flags.part.0+0x95/0x4f0 [ 2728.764051] ? putname+0x89/0x140 [ 2728.764320] getname_flags+0x9e/0xf0 [ 2728.764601] vfs_fstatat+0x77/0xb0 [ 2728.764871] __do_sys_newstat+0x81/0x100 [ 2728.765169] ? __pfx___do_sys_newstat+0x10/0x10 [ 2728.765530] ? perf_trace_preemptirq_template+0x272/0x410 [ 2728.765941] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2728.766385] ? syscall_enter_from_user_mode+0x21/0x50 [ 2728.766755] ? syscall_enter_from_user_mode+0x21/0x50 [ 2728.767121] ? lockdep_hardirqs_on+0x7d/0x100 [ 2728.767462] do_syscall_64+0x3f/0x90 [ 2728.767749] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2728.768124] RIP: 0033:0x7f85cf83cb16 [ 2728.768391] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2728.769662] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2728.770195] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2728.770696] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2728.771196] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2728.771701] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000003 [ 2728.772202] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2728.772722] [ 2728.775421] loop5: detected capacity change from 0 to 40 [ 2728.787426] loop0: detected capacity change from 0 to 40 [ 2728.790710] loop7: detected capacity change from 0 to 40 [ 2728.791348] FAT-fs (loop5): invalid media value (0x00) [ 2728.792182] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2728.813653] loop6: detected capacity change from 0 to 40 [ 2728.890810] FAULT_INJECTION: forcing a failure. [ 2728.890810] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.891851] CPU: 0 PID: 14362 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2728.892439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.893015] Call Trace: [ 2728.893204] [ 2728.893381] dump_stack_lvl+0x8f/0xb7 [ 2728.893684] should_fail_ex.cold+0x5/0xa [ 2728.893997] should_failslab+0x9/0x20 [ 2728.894286] __kmem_cache_alloc_node+0x5b/0x400 [ 2728.894635] ? iter_file_splice_write+0x169/0xcb0 [ 2728.895002] ? iter_file_splice_write+0x169/0xcb0 [ 2728.895493] __kmalloc+0x46/0xc0 [ 2728.896136] iter_file_splice_write+0x169/0xcb0 [ 2728.896896] ? generic_file_read_iter+0x330/0x550 [ 2728.897758] ? generic_file_splice_read+0x1bc/0x4d0 [ 2728.898683] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2728.899511] ? __pfx_generic_file_splice_read+0x10/0x10 [ 2728.900504] ? inode_security+0x105/0x140 [ 2728.901215] ? security_file_permission+0xb5/0xe0 [ 2728.902056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2728.902924] direct_splice_actor+0x113/0x180 [ 2728.903670] splice_direct_to_actor+0x33a/0x8c0 [ 2728.904462] ? __pfx_direct_splice_actor+0x10/0x10 [ 2728.905315] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2728.906028] ? security_file_permission+0xb5/0xe0 [ 2728.906668] do_splice_direct+0x1bc/0x290 [ 2728.907194] ? __pfx_do_splice_direct+0x10/0x10 [ 2728.907795] ? lock_is_held_type+0xdb/0x130 [ 2728.908369] do_sendfile+0xb1d/0x1280 [ 2728.908881] ? __pfx_do_sendfile+0x10/0x10 [ 2728.909458] __x64_sys_sendfile64+0x248/0x2a0 [ 2728.910036] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2728.910665] ? syscall_enter_from_user_mode+0x21/0x50 [ 2728.911300] ? syscall_enter_from_user_mode+0x21/0x50 [ 2728.911957] do_syscall_64+0x3f/0x90 [ 2728.912438] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2728.913084] RIP: 0033:0x7f0eb6263b19 [ 2728.913570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2728.915760] RSP: 002b:00007f0eb37d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2728.916705] RAX: ffffffffffffffda RBX: 00007f0eb6376f60 RCX: 00007f0eb6263b19 [ 2728.917617] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2728.918481] RBP: 00007f0eb37d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.919348] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 2728.920207] R13: 00007ffe15765a5f R14: 00007f0eb37d9300 R15: 0000000000022000 [ 2728.921108] [ 2728.961350] syz-executor.4: attempt to access beyond end of device [ 2728.961350] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2728.963123] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2729.075280] syz-executor.7: attempt to access beyond end of device [ 2729.075280] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.077184] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:40:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 70) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:40:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) [ 2729.239614] syz-executor.4: attempt to access beyond end of device [ 2729.239614] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.241573] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:40:47 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2729.309621] loop0: detected capacity change from 0 to 40 [ 2729.328757] loop2: detected capacity change from 0 to 256 13:40:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x101880, 0x2) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x27, 0x38, 0x3, 0xe, 0x5, 0x1, 0x2, 0xe7}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2729.351205] FAULT_INJECTION: forcing a failure. [ 2729.351205] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.353113] CPU: 0 PID: 14379 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2729.354148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2729.355250] Call Trace: [ 2729.355590] [ 2729.355893] dump_stack_lvl+0x8f/0xb7 [ 2729.356391] should_fail_ex.cold+0x5/0xa [ 2729.356928] should_failslab+0x9/0x20 [ 2729.357450] kmem_cache_alloc_lru+0x6b/0x760 [ 2729.358009] ? __d_alloc+0x31/0x9c0 [ 2729.358508] __d_alloc+0x31/0x9c0 [ 2729.358989] d_alloc_parallel+0x10e/0x1530 [ 2729.359541] ? __pfx___lock_acquire+0x10/0x10 [ 2729.360127] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2729.360729] ? lockdep_init_map_type+0x21e/0x7f0 [ 2729.361360] ? lockdep_init_map_type+0x21e/0x7f0 [ 2729.361994] __lookup_slow+0x193/0x470 [ 2729.362508] ? __pfx___lookup_slow+0x10/0x10 [ 2729.363100] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2729.363883] ? __rhashtable_remove_fast.constprop.0+0xc60/0x1390 [ 2729.364688] ? lookup_fast+0x14e/0x530 [ 2729.365221] walk_component+0x345/0x5b0 [ 2729.365766] path_lookupat+0x1ba/0x850 [ 2729.366283] filename_lookup+0x1d2/0x590 [ 2729.366824] ? __pfx_filename_lookup+0x10/0x10 [ 2729.367437] ? find_held_lock+0x2c/0x110 [ 2729.367962] ? lock_release+0x3b6/0x750 [ 2729.368478] ? __might_fault+0xd9/0x180 [ 2729.369019] ? __virt_addr_valid+0x102/0x340 [ 2729.369603] vfs_statx+0x14c/0x430 [ 2729.370076] ? __pfx_vfs_statx+0x10/0x10 [ 2729.370591] ? getname_flags.part.0+0x1dd/0x4f0 [ 2729.371191] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2729.371818] vfs_fstatat+0x90/0xb0 [ 2729.372290] __do_sys_newstat+0x81/0x100 [ 2729.372815] ? __pfx___do_sys_newstat+0x10/0x10 [ 2729.373417] ? perf_trace_preemptirq_template+0x272/0x410 [ 2729.374128] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2729.374884] ? syscall_enter_from_user_mode+0x21/0x50 [ 2729.375537] ? syscall_enter_from_user_mode+0x21/0x50 [ 2729.376185] ? lockdep_hardirqs_on+0x7d/0x100 [ 2729.376783] do_syscall_64+0x3f/0x90 [ 2729.377281] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2729.377928] RIP: 0033:0x7f85cf83cb16 [ 2729.378398] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2729.380560] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2729.381495] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2729.382364] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2729.383234] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2729.384106] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000003 [ 2729.384969] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2729.385933] [ 2729.438213] loop6: detected capacity change from 0 to 40 13:40:47 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x28, 0xb4, 0x7, 0x0, 0x0, 0x2100, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x10000, 0x100000000}, 0xcd54, 0xc33, 0xfffffffc, 0x9, 0xd484, 0x80, 0x7, 0x0, 0xff, 0x0, 0x81}, 0xffffffffffffffff, 0xd, r0, 0xcf26c9091c73cc0c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = getpgid(0xffffffffffffffff) r4 = fsmount(r0, 0x1, 0x82) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{0x0, 0x0, 0x6, 0x4, 0x11, 0x3da0, 0x1, 0x3d, 0x40d54b1d, 0x1, 0x5, 0xc9, 0x7, 0x8, 0x400}}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x20, 0x20, 0x51, 0xc2, 0x0, 0x810000000000000, 0x4, 0xfbf72808a060bb84, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xcb2, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x85150fcc5f70f6be, 0x3, 0x2, 0x0, 0x1, 0xc, 0x5, 0x0, 0x8, 0x0, 0x8}, r3, 0x6, r4, 0xb) 13:40:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x2, r4}, {0x8, 0x1, r4}, {0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x0, r4}, {0x8, 0x5, r4}, {0x8, 0x7, r4}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000018000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='./file0\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r0, 0x0, 0xfffffdef) [ 2729.582986] syz-executor.6: attempt to access beyond end of device [ 2729.582986] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.584619] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2729.632739] loop7: detected capacity change from 0 to 40 [ 2729.639680] loop4: detected capacity change from 0 to 40 [ 2729.667826] syz-executor.0: attempt to access beyond end of device [ 2729.667826] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.669705] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2729.800213] syz-executor.4: attempt to access beyond end of device [ 2729.800213] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.801735] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2729.832877] syz-executor.7: attempt to access beyond end of device [ 2729.832877] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2729.834713] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:41:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 71) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:41:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="1a3d00000100000018b10000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r4, &(0x7f00000001c0)='./file0\x00') renameat(r4, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000300)=""/151) sendfile(r2, r0, 0x0, 0xfffffdef) 13:41:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file1/file0\x00') r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x401}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r4 = eventfd(0x81) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r6, r5) copy_file_range(r4, &(0x7f0000000040)=0x7fff, r6, &(0x7f0000000180)=0x8, 0xffffffffffffff80, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 13:41:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:03 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:41:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0xffffe000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x7fe, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0), 0x0, 0x3}], 0x42000, &(0x7f0000000300)={[{@acl}, {@usrquota}], [{@appraise}, {@fsname={'fsname', 0x3d, '\\$:\x92\xe3]/++:+.-{\''}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user}]}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a070000000000000000000803000000080000000000000009000000000000000407002e2f66696c6531"], 0x2a) execveat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000003c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='subj_user', &(0x7f0000000480)='fsname', &(0x7f00000004c0)='!{+^(*^*@+%#}\x00'], 0x400) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0xa0, 0x7f, 0x8, 0x9, 0x0, 0x10000000000, 0x2010, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x1, 0x1, 0x1, 0x2, 0x513, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0x10, r4, 0x2) [ 2744.639068] loop4: detected capacity change from 0 to 40 [ 2744.642097] loop5: detected capacity change from 0 to 40 [ 2744.646349] loop1: detected capacity change from 0 to 40 [ 2744.650884] FAT-fs (loop5): invalid media value (0x00) [ 2744.651281] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2744.653113] loop7: detected capacity change from 0 to 40 [ 2744.721995] syz-executor.4: attempt to access beyond end of device [ 2744.721995] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2744.722975] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2744.727218] loop6: detected capacity change from 0 to 40 [ 2744.730387] loop0: detected capacity change from 0 to 40 [ 2744.754153] loop2: detected capacity change from 0 to 256 [ 2744.780422] syz-executor.1: attempt to access beyond end of device [ 2744.780422] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2744.782067] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:41:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r3, r2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) 13:41:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 72) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2744.944642] loop1: detected capacity change from 0 to 40 [ 2744.994156] syz-executor.7: attempt to access beyond end of device [ 2744.994156] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2744.995341] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:41:03 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2745.006794] syz-executor.6: attempt to access beyond end of device [ 2745.006794] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.007981] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2745.009287] loop4: detected capacity change from 0 to 40 [ 2745.012408] loop2: detected capacity change from 0 to 256 [ 2745.040017] FAULT_INJECTION: forcing a failure. [ 2745.040017] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.041033] CPU: 1 PID: 14434 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2745.041671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2745.042182] Call Trace: [ 2745.042364] [ 2745.042535] dump_stack_lvl+0x8f/0xb7 [ 2745.042830] should_fail_ex.cold+0x5/0xa [ 2745.043145] ? getname_flags.part.0+0x50/0x4f0 [ 2745.043492] should_failslab+0x9/0x20 [ 2745.043754] kmem_cache_alloc+0x5a/0x410 [ 2745.044053] ? lockdep_hardirqs_on+0x7d/0x100 [ 2745.044366] getname_flags.part.0+0x50/0x4f0 [ 2745.044703] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2745.045020] getname_flags+0x9e/0xf0 [ 2745.045307] vfs_fstatat+0x77/0xb0 [ 2745.045571] __do_sys_newstat+0x81/0x100 [ 2745.045871] ? __pfx___do_sys_newstat+0x10/0x10 [ 2745.046185] ? perf_trace_preemptirq_template+0x272/0x410 [ 2745.046598] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2745.046997] ? syscall_enter_from_user_mode+0x21/0x50 [ 2745.047377] ? syscall_enter_from_user_mode+0x21/0x50 [ 2745.047718] ? lockdep_hardirqs_on+0x7d/0x100 [ 2745.048053] do_syscall_64+0x3f/0x90 [ 2745.048308] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2745.048685] RIP: 0033:0x7f85cf83cb16 [ 2745.048960] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2745.050163] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2745.050717] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2745.051159] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2745.051667] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2745.052118] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000004 [ 2745.052623] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2745.053083] [ 2745.092069] syz-executor.0: attempt to access beyond end of device [ 2745.092069] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.093253] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2745.149981] syz-executor.4: attempt to access beyond end of device [ 2745.149981] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.152244] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2745.155205] syz-executor.1: attempt to access beyond end of device [ 2745.155205] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.156579] Buffer I/O error on dev loop1, logical block 10, lost async page write 13:41:03 executing program 7: renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/196, 0xc4}], 0x9, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}, 0x40002160) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c01000000000000002f66696c653000"]) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) r3 = inotify_init() r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r5, r4) sendfile(r3, r4, &(0x7f0000000180)=0x9, 0x7) [ 2745.197317] syz-executor.4: attempt to access beyond end of device [ 2745.197317] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.199226] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:41:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 13:41:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2745.295609] loop7: detected capacity change from 0 to 40 [ 2745.315082] FAT-fs (loop7): Unrecognized mount option "./file0/file0" or missing value [ 2745.330527] loop6: detected capacity change from 0 to 40 [ 2745.346723] loop0: detected capacity change from 0 to 40 [ 2745.386169] loop1: detected capacity change from 0 to 40 [ 2745.499200] syz-executor.6: attempt to access beyond end of device [ 2745.499200] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.500741] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2745.534320] syz-executor.6: attempt to access beyond end of device [ 2745.534320] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.536404] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2746.115219] loop7: detected capacity change from 0 to 40 [ 2746.119036] FAT-fs (loop7): Unrecognized mount option "./file0/file0" or missing value 13:41:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 73) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:41:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4402, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r5, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0/file0\x00'}) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x236000, 0x28) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:20 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:41:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x7b3bba50, 0x1, &(0x7f00000001c0)=[{&(0x7f00000005c0)="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", 0x197, 0x2}], 0x3001828, &(0x7f0000000300)=ANY=[@ANYBLOB="756e686964652c73657373696f6e3d307830303030303030303030303030436378ddbd3034652c2b04", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=cruft,\x00']) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000580)=[{{&(0x7f0000000480)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000500)="07625364bf85ed13a59e00229f895b2dcc293df1650fc74609ccb0532f43567812e7ba7540c69f20d8c6f754cd7fcadfb375988dff92f1f3db970a13ff3255649b42e291d2989a63b5c30372993a333e606969082c3b409ceea399a1dcc9b5beb5d6e83556b946a7be76b9ac", 0x6c}], 0x1, 0x0, 0x0, 0x20000004}}], 0x1, 0x4008041) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2761.899122] loop6: detected capacity change from 0 to 40 [ 2761.939056] loop4: detected capacity change from 0 to 40 [ 2761.952771] loop5: detected capacity change from 0 to 40 [ 2761.958379] FAT-fs (loop5): invalid media value (0x00) [ 2761.958901] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2761.989149] bio_check_eod: 2 callbacks suppressed [ 2761.989162] syz-executor.6: attempt to access beyond end of device [ 2761.989162] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2761.993244] buffer_io_error: 2 callbacks suppressed [ 2761.993267] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2761.999291] loop2: detected capacity change from 0 to 256 13:41:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) [ 2762.001385] loop1: detected capacity change from 0 to 40 13:41:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2762.141394] loop7: detected capacity change from 0 to 40 [ 2762.153732] loop0: detected capacity change from 0 to 40 13:41:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000645e7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40007fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81a34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r5, r4) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES16, @ANYRESDEC=r5], 0x4e) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) close_range(r0, r1, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x7, 0x8, 0xc0, 0x4, 0x0, 0x236, 0x80, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp, 0x4000, 0x8, 0x5d7, 0x8, 0xfffffffffffff000, 0x200, 0xff, 0x0, 0xbee, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:41:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 74) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:41:20 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2762.338866] syz-executor.4: attempt to access beyond end of device [ 2762.338866] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.340826] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2762.347032] loop6: detected capacity change from 0 to 40 [ 2762.549841] syz-executor.7: attempt to access beyond end of device [ 2762.549841] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.551773] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2762.573787] loop2: detected capacity change from 0 to 256 [ 2762.624917] FAULT_INJECTION: forcing a failure. [ 2762.624917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2762.626792] CPU: 1 PID: 14497 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2762.627851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.628781] Call Trace: [ 2762.629139] [ 2762.629444] dump_stack_lvl+0x8f/0xb7 [ 2762.629986] should_fail_ex.cold+0x5/0xa [ 2762.630551] strncpy_from_user+0x38/0x500 [ 2762.631110] getname_flags.part.0+0x95/0x4f0 [ 2762.631717] getname_flags+0x9e/0xf0 [ 2762.632222] vfs_fstatat+0x77/0xb0 [ 2762.632714] __do_sys_newstat+0x81/0x100 [ 2762.633251] ? __pfx___do_sys_newstat+0x10/0x10 [ 2762.633909] ? perf_trace_preemptirq_template+0x272/0x410 [ 2762.634656] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2762.635462] ? syscall_enter_from_user_mode+0x21/0x50 [ 2762.636156] ? syscall_enter_from_user_mode+0x21/0x50 [ 2762.636827] ? lockdep_hardirqs_on+0x7d/0x100 [ 2762.637455] do_syscall_64+0x3f/0x90 [ 2762.637994] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2762.638684] RIP: 0033:0x7f85cf83cb16 [ 2762.639179] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2762.641411] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2762.642427] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2762.643341] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2762.644292] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2762.645328] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000004 [ 2762.646250] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2762.647255] 13:41:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f00000042c0)=ANY=[@ANYBLOB="ffff0000"], 0x6) r4 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x6, 0x0, 0x5, 0x0, 0x8, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x6}, 0x8000, 0x7fffffff, 0xc9, 0x8, 0x2, 0x0, 0x3, 0x0, 0xfffffffb, 0x0, 0x1f}, r4, 0xf, r5, 0x1) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, r4, 0x3, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2762.711284] syz-executor.0: attempt to access beyond end of device [ 2762.711284] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.713362] Buffer I/O error on dev loop0, logical block 10, lost async page write 13:41:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, &(0x7f0000000000)=0xfff, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2762.796068] loop6: detected capacity change from 0 to 40 [ 2762.829105] loop4: detected capacity change from 0 to 40 13:41:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0xfffffffd, 0xffffeffe, 0x2, 0x9, 0x0, 0x202}, {0x4f0, 0x80000001, 0xfffffffffffffffb, 0x80, 0x800, 0x10001}]}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0xfffffffffffffffe, 0x220800) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r5, r4) write(r5, &(0x7f0000000180)="7bf5f299e97c78374a830ddd820b170ff56daeee7328643214bda5acc45b1f729981a2ac9d6c53840d85f3f036e2a4", 0x2f) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:41:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 2762.932017] loop7: detected capacity change from 0 to 40 [ 2762.982028] syz-executor.4: attempt to access beyond end of device [ 2762.982028] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.983671] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2762.994091] syz-executor.6: attempt to access beyond end of device [ 2762.994091] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.995568] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2763.021252] loop0: detected capacity change from 0 to 40 [ 2763.181112] syz-executor.0: attempt to access beyond end of device [ 2763.181112] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2763.181407] syz-executor.7: attempt to access beyond end of device [ 2763.181407] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2763.183355] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2763.185123] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:41:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 13:41:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 13:41:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:34 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x10010000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:41:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 75) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 13:41:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 13:41:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="ffff0000f7e14ca7541ce98eaf5268ecafd56e31f14bd3ed427f409a3d4ed9c78e465af794a24a8091bbf68db29acae482a720e270e4967dba511305e9cfbb3a1e711356cc43bb72ec01d357f121200ec59261942de9e183d4f99470e23f3354340f114b6f551bcbffa727c6afaaf71368ff316157d9062140d074c878c0aa13969aa52a27c34d7ffb22996844c6ea3ce79ca637662beaf6aabbf4ca5f4a2cdb66b681f6e740898ca3ba54035a8af1231b"], 0x6) r3 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000ede6ffff001800006a", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x6, 0x0, 0x5, 0x0, 0x8, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x6}, 0x8000, 0x7fffffff, 0xc9, 0x8, 0x2, 0x0, 0x3, 0x0, 0xfffffffb, 0x0, 0x1f}, r3, 0xf, r4, 0x1) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) dup2(r6, r5) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9, 0x1, 0x25, 0x0, 0x0, 0xc53, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000180), 0x2}, 0x2400, 0xfffffffffffffff7, 0x5, 0x0, 0x8, 0x8, 0x72ad, 0x0, 0x5, 0x0, 0x6}, r3, 0xf, r5, 0x2) openat(r2, &(0x7f0000000040)='./file1\x00', 0x8c83, 0x4) [ 2776.143599] loop1: detected capacity change from 0 to 40 [ 2776.149109] loop2: detected capacity change from 0 to 256 [ 2776.159060] loop6: detected capacity change from 0 to 40 [ 2776.175568] loop5: detected capacity change from 0 to 40 [ 2776.188414] loop7: detected capacity change from 0 to 40 [ 2776.194285] loop4: detected capacity change from 0 to 40 [ 2776.196716] FAT-fs (loop5): invalid media value (0x00) [ 2776.197511] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2776.223052] loop0: detected capacity change from 0 to 40 [ 2776.283320] syz-executor.6: attempt to access beyond end of device [ 2776.283320] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.284598] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2776.320400] syz-executor.4: attempt to access beyond end of device [ 2776.320400] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.321323] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:41:34 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x18020000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:41:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 76) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2776.378624] syz-executor.4: attempt to access beyond end of device [ 2776.378624] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.379651] Buffer I/O error on dev loop4, logical block 10, lost async page write 13:41:34 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000002eb766696c6531003561589f2f624541b1ac3f57308c07c8b4"]) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x2000, 0x8a) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x7, 0x1, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000, 0xfab8}], 0x800402, &(0x7f0000001480)={[{@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000300)={{0x1, 0x5}, 0x100, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) syz_mount_image$iso9660(&(0x7f00000015c0), &(0x7f0000001600)='./file1\x00', 0xd, 0x1, &(0x7f0000001680)=[{&(0x7f0000001640)="31c38d68d0a52c2f7536948b753ac2ffe1eda11478e43e3263d35f1a6d02469e9372634735fd90dec6909ada239ecf0751754a5bc267de263fa1", 0x3a, 0x100}], 0x208000, &(0x7f0000001880)=ANY=[@ANYBLOB="0900000b91f799e5e8c06f8d1983bbd11b531353d073df22310935f3fb2439623c419a0fcb54154cd055e20e1a81dabc602509455b17d5ac18d5636810b5ef59a71a0775a0d3a7adc5ff64156e61bed7cc64aad847a12bf781ffcbaa40cb4b7ec60d78127e8eba6e4a8a550093b3db7051af913db5809ddc4eaaa1cde9725597ba2d2506654fc608d602ba5e3b51cc16f4c0d1b432e7b5497f31aac8f802642fc7ea86714afe4d7f45a34c61fbb84ca716e9a1ff6b8c542a5973e8d2b7fbe032fb4b9c", @ANYRESHEX=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="f6d6fd551665663d76666174002c7569643c", @ANYRES64, @ANYBLOB="2c7375626a5f747970653d272e235c2c66736e616d653d2f2c6d61736a3d4d41595f57524954452c7063723d303030b03030305e3030303030303030010134372c00"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000001580)='./file0\x00', 0x20) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x5, 0x1, 0x7, 0xf7, 0x0, 0x100, 0x4002, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x6f4d9b53, 0x7fffffff}, 0x10, 0x8, 0x200, 0x4, 0x80, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r5, 0x1) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2776.527364] syz-executor.0: attempt to access beyond end of device [ 2776.527364] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.528421] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2776.535690] syz-executor.7: attempt to access beyond end of device [ 2776.535690] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.536986] Buffer I/O error on dev loop7, logical block 10, lost async page write 13:41:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa000, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000006c0)={{r2}, r3, 0x14, @unused=[0x8, 0x7, 0x13b3, 0xffffffff], @subvolid=0xff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000180)="27142046c7d7b84d39c64e29393e22f59637d2d1bf4d3b23a52a40106b5c4e09f6047c5f0346fcea987738f5b47cddd276830dda79d6903daa7ccb3c5313bdf67ba0ebadad938b28a7a085a711f1fa5b7f366f0ffd47e0397036e7fb0e363f93b2a502c648847ef70557236b852409f43c981756f3aedf91520743e936b6", 0x7e, 0x40000040, 0x1}, 0x72a1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x2, 0x2, &(0x7f0000000440)=[{&(0x7f0000000340)="9fdf9f051a5d63bb38c90f67ae0a09ee66e883820dbcd9e3ccc6eceb21796d8b0f272ac52f4f5820208b04de6d2914", 0x2f, 0x1000}, {&(0x7f0000000380)="50f03d1e32d38f363feb3ef45dedf02eef5e57490e27c41e8d11e44bf2ff5d4184cca8eaa0064a2df2c3271d6b993f23c9fcdd4b8146db01a2cdca709a8af53a0932f7a802366fe8a8cb881affe949a83b76bda284f0f3f0517df7e800a0cfcb4dfe725f6161aa773317b67698b32b77d814dd6df6369c128ca0a8357912d98feebbc90358305c8caf03a11a1e1346bf", 0x90, 0x800}], 0x80000, &(0x7f0000000480)={[], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '@{&'}}]}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2776.550990] loop2: detected capacity change from 0 to 256 [ 2776.580694] syz-executor.7: attempt to access beyond end of device [ 2776.580694] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.581573] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2776.585725] loop4: detected capacity change from 0 to 40 13:41:35 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) 13:41:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) [ 2776.635225] loop6: detected capacity change from 0 to 40 13:41:35 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="960000f4e9b37d768cd011d63b82a960511b492d115405a433c38987ed0b565bcb81fd8c7bdbc4ebaee398ffdeaf949ee4c1de0b29f0"]) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0\x00', r2, &(0x7f0000000300)='./file0\x00') renameat(r2, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x111042, 0x21) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000340)=ANY=[@ANYBLOB="010000001d881963aeb9afde", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002eb4078a8f83a94d2f66696c65302f66696c653000"]) openat(r4, &(0x7f0000000040)='./file0\x00', 0x41a402, 0x106) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x13) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r3, 0x0, 0xfffffdef) [ 2776.777786] syz-executor.4: attempt to access beyond end of device [ 2776.777786] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.778861] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2776.809316] syz-executor.6: attempt to access beyond end of device [ 2776.809316] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.810374] Buffer I/O error on dev loop6, logical block 10, lost async page write 13:41:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000980)="c9", 0x1}, {0x0, 0x0, 0x10000}]) (fail_nth: 77) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_logitech', 0x82201, 0x44) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x10000, 0x1d, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x6, 0x1, 0x4, 0x2, 0x3, 0x0, 0x0, 0x574, 0x0, 0x6f3}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2776.843347] loop7: detected capacity change from 0 to 40 [ 2776.845802] syz-executor.6: attempt to access beyond end of device [ 2776.845802] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2776.846950] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2776.860025] loop0: detected capacity change from 0 to 40 13:41:35 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe3000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="af0100000001000000180000011e569df27a301f9b8a2a93ba51708e1315d374", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x200017e}) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) openat(r5, &(0x7f0000000140)='./file0\x00', 0x10000, 0x180) [ 2777.066868] loop2: detected capacity change from 0 to 256 [ 2777.109927] FAULT_INJECTION: forcing a failure. [ 2777.109927] name failslab, interval 1, probability 0, space 0, times 0 [ 2777.111034] CPU: 0 PID: 14577 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221208 #1 [ 2777.111588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.112129] Call Trace: [ 2777.112310] [ 2777.112478] dump_stack_lvl+0x8f/0xb7 [ 2777.112752] should_fail_ex.cold+0x5/0xa [ 2777.113051] ? getname_flags.part.0+0x50/0x4f0 [ 2777.113379] should_failslab+0x9/0x20 [ 2777.113661] kmem_cache_alloc+0x5a/0x410 [ 2777.113964] ? lockdep_hardirqs_on+0x7d/0x100 [ 2777.114297] getname_flags.part.0+0x50/0x4f0 [ 2777.114607] ? blkdev_common_ioctl+0x19d/0x1ac0 [ 2777.114948] getname_flags+0x9e/0xf0 [ 2777.115223] vfs_fstatat+0x77/0xb0 [ 2777.115493] __do_sys_newstat+0x81/0x100 [ 2777.115782] ? __pfx___do_sys_newstat+0x10/0x10 [ 2777.116109] ? perf_trace_preemptirq_template+0x272/0x410 [ 2777.116517] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2777.116944] ? syscall_enter_from_user_mode+0x21/0x50 [ 2777.117310] ? syscall_enter_from_user_mode+0x21/0x50 [ 2777.117676] ? lockdep_hardirqs_on+0x7d/0x100 [ 2777.118013] do_syscall_64+0x3f/0x90 [ 2777.118282] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.118659] RIP: 0033:0x7f85cf83cb16 [ 2777.118924] Code: 28 c3 66 90 48 c7 c0 ff ff ff ff eb e0 e8 f2 29 00 00 66 90 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 bc ff ff ff f7 d8 64 89 02 [ 2777.120149] RSP: 002b:00007f85ccdb2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2777.120694] RAX: ffffffffffffffda RBX: 00007f85ccdb2f40 RCX: 00007f85cf83cb16 [ 2777.121200] RDX: 00007f85ccdb2fc0 RSI: 00007f85ccdb2fc0 RDI: 00007f85ccdb2f40 [ 2777.121712] RBP: 00007f85ccdb36bc R08: 0000000000000001 R09: 00007f85ccdb2d90 [ 2777.122241] R10: 00007f85ccdb2c47 R11: 0000000000000246 R12: 0000000000000005 [ 2777.122757] R13: 00007f85ccdb2fc0 R14: 0000000000000000 R15: 00007f85ccdb2f80 [ 2777.123287] [ 2777.137118] syz-executor.0: attempt to access beyond end of device [ 2777.137118] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2777.138884] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2777.644949] ================================================================== [ 2777.645962] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 2777.646835] Read of size 8 at addr ffff88801cf93b18 by task syz-executor/14581 [ 2777.647767] [ 2777.648002] CPU: 1 PID: 14581 Comm: syz-executor Not tainted 6.1.0-rc8-next-20221208 #1 [ 2777.649034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.650090] Call Trace: [ 2777.650436] [ 2777.650741] dump_stack_lvl+0x8f/0xb7 [ 2777.651264] print_report+0x175/0x478 [ 2777.651794] ? __lock_acquire+0x42c9/0x5e70 [ 2777.652376] kasan_report+0xbf/0x1c0 [ 2777.652903] ? __lock_acquire+0x42c9/0x5e70 [ 2777.653484] __lock_acquire+0x42c9/0x5e70 [ 2777.654076] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2777.654699] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2777.655376] ? __pfx___lock_acquire+0x10/0x10 [ 2777.655986] ? __switch_to+0x5c3/0xee0 [ 2777.656548] lock_acquire+0x1a6/0x530 [ 2777.657071] ? kmemleak_scan+0x1a0/0x1600 [ 2777.657645] ? __pfx_lock_acquire+0x10/0x10 [ 2777.658242] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 2777.658973] ? __call_rcu_common.constprop.0+0x589/0xa40 [ 2777.659702] ? lockdep_hardirqs_on+0x7d/0x100 [ 2777.660322] ? _raw_spin_lock_irq+0x45/0x50 [ 2777.660910] _raw_spin_lock_irq+0x36/0x50 [ 2777.661473] ? kmemleak_scan+0x1a0/0x1600 [ 2777.662686] kmemleak_scan+0x1a0/0x1600 [ 2777.666503] ? __pfx_kmemleak_scan+0x10/0x10 [ 2777.667139] ? strncpy_from_user+0x107/0x500 [ 2777.667762] kmemleak_write+0x574/0x680 [ 2777.668330] ? __pfx_kmemleak_write+0x10/0x10 [ 2777.668973] ? debugfs_file_get+0x1d2/0x450 [ 2777.669578] ? __pfx_debugfs_file_get+0x10/0x10 [ 2777.670251] full_proxy_write+0x121/0x190 [ 2777.670839] vfs_write+0x358/0xe40 [ 2777.671354] ? __pfx_full_proxy_write+0x10/0x10 [ 2777.672006] ? __pfx_vfs_write+0x10/0x10 [ 2777.672586] ? lock_release+0x3b6/0x750 [ 2777.673136] ? __up_read+0x192/0x730 [ 2777.673675] ? handle_mm_fault+0x43d/0xae0 [ 2777.674282] ? __pfx___up_read+0x10/0x10 [ 2777.674879] ? __fget_light+0x212/0x280 [ 2777.675438] ksys_write+0x12b/0x260 [ 2777.675968] ? __pfx_ksys_write+0x10/0x10 [ 2777.676567] ? syscall_enter_from_user_mode+0x21/0x50 [ 2777.677271] ? syscall_enter_from_user_mode+0x21/0x50 [ 2777.677973] do_syscall_64+0x3f/0x90 [ 2777.678501] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.679208] RIP: 0033:0x7f793e7cc5c3 [ 2777.679722] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 2777.682160] RSP: 002b:00007ffe148d58d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2777.683195] RAX: ffffffffffffffda RBX: 00007ffe148d5f18 RCX: 00007f793e7cc5c3 [ 2777.684158] RDX: 0000000000000004 RSI: 00007f793e882ed9 RDI: 0000000000000003 [ 2777.685132] RBP: 0000000000000002 R08: 0000000000000ad9 R09: 00007ffe14904080 [ 2777.686101] R10: 00007ffe14904090 R11: 0000000000000246 R12: 00000000fffffff6 [ 2777.687067] R13: 00007ffe148d6ef1 R14: 0000000000000000 R15: 00000000002a5fef [ 2777.688047] [ 2777.688382] [ 2777.688627] Allocated by task 100: [ 2777.689116] kasan_save_stack+0x22/0x50 [ 2777.689681] kasan_set_track+0x25/0x30 [ 2777.690251] __kasan_slab_alloc+0x5c/0x70 [ 2777.690843] kmem_cache_alloc+0x1e1/0x410 [ 2777.691419] __create_object+0x3d/0xc10 [ 2777.691984] kmem_cache_alloc+0x273/0x410 [ 2777.692569] skb_clone+0x172/0x3c0 [ 2777.693080] netlink_broadcast+0x88f/0xd90 [ 2777.693668] kobject_uevent_env+0xa68/0xfa0 [ 2777.694277] kobject_synth_uevent+0x708/0x820 [ 2777.694907] uevent_store+0x24/0x50 [ 2777.695435] dev_attr_store+0x57/0x80 [ 2777.695971] sysfs_kf_write+0x117/0x170 [ 2777.696533] kernfs_fop_write_iter+0x3f7/0x610 [ 2777.697161] vfs_write+0xa4f/0xe40 [ 2777.697678] ksys_write+0x12b/0x260 [ 2777.698211] do_syscall_64+0x3f/0x90 [ 2777.698731] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.699453] [ 2777.699704] Freed by task 13: [ 2777.700138] kasan_save_stack+0x22/0x50 [ 2777.700709] kasan_set_track+0x25/0x30 [ 2777.701272] kasan_save_free_info+0x2e/0x50 [ 2777.701864] __kasan_slab_free+0x10a/0x190 [ 2777.702489] kmem_cache_free+0xfb/0x610 [ 2777.703044] rcu_core+0x7e2/0x2090 [ 2777.703555] __do_softirq+0x1c7/0x8f9 [ 2777.704105] [ 2777.704348] Last potentially related work creation: [ 2777.705018] kasan_save_stack+0x22/0x50 [ 2777.705583] __kasan_record_aux_stack+0x95/0xb0 [ 2777.706245] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2777.706977] kmem_cache_free+0xc1/0x610 [ 2777.707540] kfree_skbmem+0xef/0x1b0 [ 2777.708061] consume_skb+0xd8/0x170 [ 2777.708594] netlink_recvmsg+0x4da/0xd60 [ 2777.709155] sock_recvmsg+0x14d/0x190 [ 2777.709694] ____sys_recvmsg+0x210/0x5c0 [ 2777.710277] ___sys_recvmsg+0xf2/0x190 [ 2777.710835] __sys_recvmsg+0xf4/0x1c0 [ 2777.711382] do_syscall_64+0x3f/0x90 [ 2777.711909] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.712621] [ 2777.712865] Second to last potentially related work creation: [ 2777.713643] kasan_save_stack+0x22/0x50 [ 2777.714208] __kasan_record_aux_stack+0x95/0xb0 [ 2777.714873] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2777.715603] kmem_cache_free+0xc1/0x610 [ 2777.716161] __put_cred+0x132/0x180 [ 2777.716678] revert_creds+0xb3/0xd0 [ 2777.717193] do_faccessat+0x2db/0x7f0 [ 2777.717697] do_syscall_64+0x3f/0x90 [ 2777.718213] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.718898] [ 2777.719131] The buggy address belongs to the object at ffff88801cf93b00 [ 2777.719131] which belongs to the cache kmemleak_object of size 368 [ 2777.720738] The buggy address is located 24 bytes inside of [ 2777.720738] 368-byte region [ffff88801cf93b00, ffff88801cf93c70) [ 2777.722214] [ 2777.722449] The buggy address belongs to the physical page: [ 2777.723161] page:00000000c735b29b refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cf92 [ 2777.724356] head:00000000c735b29b order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 2777.725528] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 2777.726339] raw: 0100000000010200 ffff88800844f780 dead000000000100 dead000000000122 [ 2777.727364] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 2777.728369] page dumped because: kasan: bad access detected [ 2777.729108] [ 2777.729349] Memory state around the buggy address: [ 2777.730021] ffff88801cf93a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2777.730968] ffff88801cf93a80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2777.731923] >ffff88801cf93b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2777.732876] ^ [ 2777.733438] ffff88801cf93b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2777.734404] ffff88801cf93c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 2777.735358] ================================================================== [ 2777.736294] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 13:41:36 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88807ffdc500 RCX=0000000000000001 RDX=1ffffd4000269098 RSI=ffffea00013484c0 RDI=ffff88807ffdc588 RBP=0100000000000000 RSP=ffff8880104af788 R8 =0000000000000000 R9 =ffffffff85d07c97 R10=fffffbfff0ba0f92 R11=0000000000000001 R12=0000000000001000 R13=000000000007ffe0 R14=0000000000000000 R15=ffff88807ffdc500 RIP=ffffffff8174cc11 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f388651c8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe066bebd000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe066bebb000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559bfb2c6648 CR3=000000000f558000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000559bfb2d1eb000000000000038fc XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000559bfb2d21a00000559bfb2d2180 XMM05=00000006000000000000559bfb2d2160 XMM06=0000559bfb2d1f400000000400000003 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824891f5 RDI=ffffffff87fb5b60 RBP=ffffffff87fb5b20 RSP=ffff8880474e71e8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87fb5b20 R14=0000000000000010 R15=ffffffff824891e0 RIP=ffffffff8248924d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555565e7400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe04f2296000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe04f2294000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3886934ae0 CR3=000000001a9a4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=ff000000000000ffff0000ff00000000 XMM03=00ff00000000ff00000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00 XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000 XMM08=00559bf91ebeec00007ffe00373a3762 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000