0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000300)={0xe257, 0x10, [0xffffffffffffffad, 0xc07, 0x0, 0x10001], &(0x7f0000000240)=[0x0, 0x0]}) sendfile(r1, r0, 0x0, 0xfffffdef) 04:20:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r3 = openat(r1, &(0x7f0000000240)='./file1\x00', 0xc40000, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x80}, 0x15582, 0x3ff, 0x0, 0x0, 0xb}, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3040.458724] loop0: detected capacity change from 0 to 40 04:20:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x7f}, 0x16, 0x1) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3040.470132] loop6: detected capacity change from 0 to 40 [ 3040.470993] loop7: detected capacity change from 0 to 40 [ 3040.475006] loop4: detected capacity change from 0 to 40 [ 3040.489032] FAT-fs (loop0): bogus number of FAT sectors [ 3040.489936] FAT-fs (loop0): Can't find a valid FAT filesystem 04:20:54 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6, &(0x7f0000000a40)={[{@gid}]}) [ 3040.533820] syz-executor.6: attempt to access beyond end of device [ 3040.533820] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3040.534833] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3040.561633] loop7: detected capacity change from 0 to 40 [ 3040.594389] loop1: detected capacity change from 0 to 40 [ 3040.697166] syz-executor.1: attempt to access beyond end of device [ 3040.697166] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3040.699374] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3041.038791] syz-executor.3: attempt to access beyond end of device [ 3041.038791] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3041.040183] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:21:09 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7, &(0x7f0000000a40)={[{@gid}]}) 04:21:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xda84) 04:21:09 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r2, 0x0, 0x8) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:21:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB='n/file0\x00']) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x220000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x800) r5 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000740)='./file1\x00', 0x9, 0x3, &(0x7f0000001240)=[{&(0x7f00000010c0)="b65e2614b7e2967d7f04032181ceccfcc096e77fb5e8ce32d709d9314b43ebce6a8f640f9d331a96b884b55fb02b8d5d3241914be73fbc6b3e2f27a2a5064190cef3de13", 0x44, 0x4}, {&(0x7f0000000780)="3443dee773e4e63d8b0b1280a4498e1cac93ccc1c7fb03987a57088c818806f1e4b4890e5c43174c3066991f4c2c6e30e996ab7c2cca93a603", 0x39, 0x2}, {&(0x7f0000001140)="a5cc6cb44cee900d11af75ffbff3d1595e939c44b21f86187de6fdba5fe368be441abba8cdf0981b613a52e74b8477c7321de1487e050e90f10b8ff7e563771655c86afa022f327ff453b5e945b62c0080b3ee23227c2db37ef910f2bc00305e9434b2bacd3d33e0c44407c38d96187c1dc2931c5ab28282acfe11400dabcd", 0x7f, 0xffffffff}], 0x2010, &(0x7f00000012c0)={[{@cruft}, {@sbsector={'sbsector', 0x3d, 0xff}}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, '/dev/full\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-\xd2/'}}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@hash}, {@audit}, {@hash}]}) mount_setattr(r5, &(0x7f0000001000)='./file0/file0\x00', 0x0, &(0x7f00000011c0)={0x1000ce, 0x70, 0x0, {r4}}, 0x20) r6 = syz_open_procfs(0x0, 0x0) fdatasync(r6) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.047628] loop1: detected capacity change from 0 to 40 [ 3056.051179] loop0: detected capacity change from 0 to 40 04:21:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x6}], 0x1104400, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYRES32=r3], 0x220) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/64, 0x40}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x10000, &(0x7f00000005c0)={0x0, 0x989680}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.056192] FAT-fs (loop0): bogus number of FAT sectors [ 3056.056690] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3056.067016] loop2: detected capacity change from 0 to 40 [ 3056.075468] loop3: detected capacity change from 0 to 40 [ 3056.088788] loop4: detected capacity change from 0 to 40 04:21:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3056.105329] loop6: detected capacity change from 0 to 40 [ 3056.167524] syz-executor.4: attempt to access beyond end of device [ 3056.167524] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.168541] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3056.187781] syz-executor.3: attempt to access beyond end of device [ 3056.187781] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.188941] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3056.200830] syz-executor.4: attempt to access beyond end of device [ 3056.200830] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.202995] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3056.223323] syz-executor.3: attempt to access beyond end of device [ 3056.223323] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.225354] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:21:09 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x8, &(0x7f0000000a40)={[{@gid}]}) [ 3056.277912] syz-executor.2: attempt to access beyond end of device [ 3056.277912] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.279711] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3056.284784] loop0: detected capacity change from 0 to 40 [ 3056.319685] FAT-fs (loop0): bogus number of FAT sectors [ 3056.320628] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3056.322318] syz-executor.1: attempt to access beyond end of device [ 3056.322318] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.324388] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:21:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x8001, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.371177] syz-executor.6: attempt to access beyond end of device [ 3056.371177] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.372992] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3056.388127] syz-executor.1: attempt to access beyond end of device [ 3056.388127] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.389255] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3056.444508] loop3: detected capacity change from 0 to 40 04:21:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1/../file0\x00', 0x10000, 0x41) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="6b5b591d8a7053892e2f66696c653000"]) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000340)={0x0, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.614886] syz-executor.3: attempt to access beyond end of device [ 3056.614886] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.616906] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:21:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x81) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x13}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x5cd0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1000, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3e, 0x0, 0xff, 0xe1, 0x0, 0x100, 0x880, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x3ff}, 0x0, 0x0, 0x7, 0x9, 0x1, 0x7f, 0x7, 0x0, 0x39, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r3, 0x0) 04:21:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') syz_mount_image$vfat(&(0x7f0000001740), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="701c6d6b810000002000f80100"/23, 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000016c0)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES64, @ANYRES16, @ANYBLOB="a009a2be30b0ec2c08d607d86159a33984abd10c39e0e6b2261502"]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r4 = openat(r2, &(0x7f0000000140)='./file1\x00', 0x200000, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) sendfile(r4, r5, &(0x7f0000001680)=0xfffffffffffffff7, 0x1b) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) recvmsg$unix(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x20) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001440)={0xc5, "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"}) [ 3056.691207] loop2: detected capacity change from 0 to 40 04:21:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x9, &(0x7f0000000a40)={[{@gid}]}) [ 3056.716873] loop0: detected capacity change from 0 to 40 [ 3056.730062] syz-executor.2: attempt to access beyond end of device [ 3056.730062] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3056.731315] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3056.733036] loop1: detected capacity change from 0 to 40 [ 3056.743196] loop4: detected capacity change from 0 to 40 04:21:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3056.793627] FAT-fs (loop4): Unrecognized mount option "0x0000000000000000000000000000000000030x0000000000000003" or missing value 04:21:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242903, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.841076] loop6: detected capacity change from 0 to 40 04:21:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000480)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="32ba9790534f9f62dd5bae37ddaf854198c97291f942b7aac3062f70b2d65526a34b5aa7aa83be4369dafb98751ef4a81a978266ebb1c9e8372ed6f5eeb8f9b9edcba9adb1264220e6844403bc1c8a48764d4f0f18e80584d76851c1dd80546796d498b258f9ec194fd58622ae91f5fee7", @ANYRES64, @ANYRES32=0x0, @ANYRES64, @ANYRES16=r0]) sendfile(r0, r0, &(0x7f0000000440)=0xfffffffffffffffe, 0x5) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0) close(r1) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x2000, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000004c0)=0x20, 0x1) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x151c2, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x634, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) sendfile(r4, r2, 0x0, 0x401) 04:21:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xa, &(0x7f0000000a40)={[{@gid}]}) 04:21:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = open(&(0x7f0000000240)='./file0\x00', 0x100000, 0x30) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000300)={0x6643, 0x81}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3056.964572] loop0: detected capacity change from 0 to 40 [ 3057.008586] loop6: detected capacity change from 0 to 40 04:21:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3057.068476] loop3: detected capacity change from 0 to 40 [ 3057.102202] FAT-fs (loop3): Unrecognized mount option "2SOb[7ݯArB/pU&KZCiuf7.˩&B DHvMOhQ݀TgԘXOՆ"" or missing value [ 3057.196707] loop3: detected capacity change from 0 to 40 [ 3057.198917] FAT-fs (loop3): Unrecognized mount option "2SOb[7ݯArB/pU&KZCiuf7.˩&B DHvMOhQ݀TgԘXOՆ"" or missing value [ 3057.248615] loop0: detected capacity change from 0 to 40 [ 3057.552287] loop4: detected capacity change from 0 to 40 [ 3057.565154] FAT-fs (loop4): Unrecognized mount option "0x0000000000000000000000000000000000030x0000000000000003" or missing value [ 3073.469789] loop3: detected capacity change from 0 to 40 [ 3073.501029] loop1: detected capacity change from 0 to 40 [ 3073.505656] bio_check_eod: 4 callbacks suppressed [ 3073.505666] syz-executor.3: attempt to access beyond end of device [ 3073.505666] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.507059] buffer_io_error: 4 callbacks suppressed [ 3073.507067] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3073.515465] loop4: detected capacity change from 0 to 40 [ 3073.522660] loop6: detected capacity change from 0 to 40 04:21:27 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc00}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:21:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) quotactl(0x1000, &(0x7f0000000240)='./file0\x00', r0, &(0x7f00000003c0)="568340587937a896b7a8f6c65df08d09791c2271dcf6263a801e49074d86d37bbf3c24f62d9fb8f9c0507142c32818d7aeb48b452df7da60217d43cf534fc125e281f4ac0da5c963c5b1e3688041beb203c3771bba3e38c6bc1ae9931992bf81f16c66933eaff1ed019afc14bc07b53a861eba656e2f903f1ec2b12e20e323119683c1bb26037d52d27ba1a7c255d4ad3e54c284c1dc783842a3a425ecbe14a75068e620ffd89651fdf1ee9ea2e031a45ad37137f9") chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0xfffffffc, 0x0) openat(r4, &(0x7f0000000480)='./file1\x00', 0x100, 0x31) execve(&(0x7f0000000500)='./file1\x00', &(0x7f0000000700)=[&(0x7f0000000540)=']\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='(#!.^*!]*%\x00', &(0x7f0000000640)='^\x00', &(0x7f0000000680)='vfat\x00', &(0x7f00000006c0)='vfat\x00'], &(0x7f00000007c0)=[&(0x7f0000000740)='}\x00', &(0x7f0000000780)='#+&\x00']) sendfile(r3, r2, &(0x7f0000000140)=0x8, 0x2) sendfile(r4, r1, &(0x7f00000004c0)=0x100000001, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept$inet(r4, &(0x7f0000000800)={0x2, 0x0, @initdev}, &(0x7f0000000840)=0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000880)={0x2, {0x19, 0x40, 0x0, 0x6, 0x6d7}}) sendfile(r2, r1, 0x0, 0xfffffdef) 04:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', &(0x7f0000000180)={0x90000, 0x40, 0x12}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000240)="2e7b451e57a8e5e6bf4a3032ba8385ba813507519b6feec1d31b16fc38c4393810111cebfcdbe506c08b2ab13d6b652523c33d", 0x33, 0x7, 0x0, 0x2, r0}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 04:21:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xb, &(0x7f0000000a40)={[{@gid}]}) 04:21:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r5 = syz_open_dev$loop(&(0x7f0000000240), 0x401, 0x400001) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000300)=0x2) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) preadv(r4, &(0x7f0000000180), 0x0, 0x9, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000000c0)={0x1, 0x3ff, 0x5}) 04:21:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) clock_gettime(0x0, &(0x7f0000005540)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000005340)=[{{&(0x7f00000003c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000002e80)=""/93, 0x5d}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/207, 0xcf}, {&(0x7f00000017c0)=""/179, 0xb3}, {&(0x7f0000001880)=""/186, 0xba}, {&(0x7f0000001940)=""/255, 0xff}, {&(0x7f0000001a40)=""/136, 0x88}], 0x7, &(0x7f0000001b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001d40)=""/225, 0xe1}, {&(0x7f0000001e40)=""/101, 0x65}, {&(0x7f0000001ec0)=""/214, 0xd6}, {&(0x7f0000001fc0)=""/61, 0x3d}], 0x4, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000020c0)=""/114, 0x72}, {&(0x7f0000002140)=""/196, 0xc4}, {&(0x7f0000002240)=""/248, 0xf8}], 0x3, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000002700)=[{&(0x7f00000024c0)=""/19, 0x13}, {&(0x7f0000002500)=""/32, 0x20}, {&(0x7f0000002540)=""/208, 0xd0}, {&(0x7f0000002640)=""/191, 0xbf}], 0x4, &(0x7f0000002740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002840), 0x6e, &(0x7f0000002d80)=[{&(0x7f00000028c0)=""/185, 0xb9}, {&(0x7f0000002980)=""/95, 0x5f}, {&(0x7f0000002a00)=""/211, 0xd3}, {&(0x7f0000002b00)=""/174, 0xae}, {&(0x7f0000002bc0)=""/144, 0x90}, {&(0x7f0000005700)=""/247, 0xf7}], 0x6, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000005180), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002f00)=""/51, 0x33}], 0x1, &(0x7f0000002f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000003040)=""/4096, 0xffffffffffffff4a}, {&(0x7f0000004040)=""/249, 0xf9}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/46, 0x2e}, {&(0x7f0000005600)=""/221, 0xdd}], 0x5, &(0x7f0000005300)}}], 0x8, 0x40000100, &(0x7f0000005580)={r2, r3+60000000}) openat(r4, &(0x7f00000055c0)='./file0\x00', 0x200000, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r5 = syz_open_procfs(0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0) openat(r6, &(0x7f0000000300)='./file1\x00', 0x200400, 0x100) fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) syncfs(r7) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:27 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/ehci_hcd', 0x2000, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000400)=0x9, 0x4) write(r5, &(0x7f0000000340)="8c01a3d006b413809d3c18247f6a3dfdf8b839d000820ee71a6e85e3d8aa5686bec679365985dbf52f19ee2cb19a7b85b2cc367ca80d766e3f1b8c0b86604e368f29dd1e7048a0004b3fe17b8af1766309c3b392dbd669b9f2939ad252003c7d9e120f4c6bdf98a46a2f3efc96", 0x6d) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) [ 3073.556021] loop0: detected capacity change from 0 to 40 [ 3073.556963] loop7: detected capacity change from 0 to 40 [ 3073.558795] loop2: detected capacity change from 0 to 40 perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3073.567793] syz-executor.4: attempt to access beyond end of device [ 3073.567793] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.568768] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3073.593239] syz-executor.4: attempt to access beyond end of device [ 3073.593239] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.594284] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:21:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x7ff}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './file2\x00'}) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3073.633366] syz-executor.1: attempt to access beyond end of device [ 3073.633366] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.634398] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3073.646343] syz-executor.6: attempt to access beyond end of device [ 3073.646343] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.647570] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3073.693996] syz-executor.1: attempt to access beyond end of device [ 3073.693996] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.696466] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3073.698822] syz-executor.2: attempt to access beyond end of device [ 3073.698822] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.699866] Buffer I/O error on dev loop2, logical block 10, lost async page write 04:21:27 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x0, 0x12041, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file2\x00'}) openat(r3, &(0x7f0000000480)='./file1\x00', 0x100, 0x20) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000380)="146ab95140dd5949b993910ebdf22f9627be8cd4a8709c8772afd08053180681553b8683ce8eb26db9a825736336fd42b24afa087d91d6a75912b8b75bf1d2a13830c023d73ae2d7cc8b3d4faf4b130aa11a17c986c6581178f2c2a1d6ceb1433a9f3221d51201ad315bf21336ce2a17dc9be1075019299f998111d8a9ff1b", 0x7f}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x9, 0x5}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:21:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x10, &(0x7f0000000a40)={[{@gid}]}) [ 3073.726116] loop4: detected capacity change from 0 to 40 [ 3073.748195] syz-executor.7: attempt to access beyond end of device [ 3073.748195] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.749985] loop3: detected capacity change from 0 to 40 [ 3073.750265] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3073.754479] FAT-fs (loop3): Unrecognized mount option "000000000000000000030x0000000000000004" or missing value 04:21:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) recvmmsg$unix(r1, &(0x7f0000001840)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/138, 0x8a}, {&(0x7f0000001600)=""/77, 0x4d}], 0x5, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x1, 0x40, &(0x7f0000001880)={0x0, 0x989680}) getpid() r3 = syz_open_procfs(r2, &(0x7f00000018c0)='net/if_inet6\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) finit_module(r0, &(0x7f0000000300)='\xdd\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0xac0, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340)="340b92a01e7ee6bdf8ce5b990150322e59119ce3dbcf78b80e4e9b59c9097515b5a854c0f67f429ca6c628ed52f180bbddf0862b0ac7c7ccb097d777e179d6fc5d21170ca73d9fca688330154f73220b2c629d29a80db868346a7e5e840c57125bd190f41d97573cc291ff6ec58b699dabf72b6ea8fb52ec26a459c55c3af6cfc33ff74118c6ac3403e3b654ff1e2b9cff892d981676f66d2a7c3017a06974e84667764ff46f0302bd4f7860fff1c8995ec9f6fb8fb0cc", 0xb7) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3073.778642] syz-executor.7: attempt to access beyond end of device [ 3073.778642] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.779687] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:21:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x77, 0x0, 0x8, 0xdb, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000040)}, 0x12005, 0x3f, 0x0, 0x4, 0x5, 0x3, 0x5, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xb, r3, 0x2) [ 3073.879059] loop0: detected capacity change from 0 to 40 [ 3073.892270] loop6: detected capacity change from 0 to 40 [ 3073.925140] loop1: detected capacity change from 0 to 40 [ 3073.979330] syz-executor.6: attempt to access beyond end of device [ 3073.979330] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3073.980403] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3074.595333] loop3: detected capacity change from 0 to 40 04:21:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x31, &(0x7f0000000a40)={[{@gid}]}) 04:21:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000240)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x7, 0x2, &(0x7f0000000380)=[{&(0x7f0000000300), 0x0, 0x798}, {&(0x7f0000000340)="a8ff3f963a6db55c60e25af41d56661f3df0fe15d010516a6183", 0x1a, 0x100000000}], 0x2010404, &(0x7f00000003c0)={[{@utf8no}, {@nonumtail}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@appraise}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) 04:21:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x1, 0x5fb67f3e}) openat(r0, &(0x7f0000000140)='./file1\x00', 0x400800, 0x11) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:21:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x9, 0x7) 04:21:41 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYBLOB="6023519b2b1d3c2126a0c4423e53d8082f46e51184a5e06e0fb4fd40b099c0410d176b4a6fd94c6c9b0480b3198683c5d9e3fadae7edb1563d97f6877131feb8e87bc6790b39d072e4a14ec146e73130766325af5391cfc017106484a7ea2167210c68e7fdbbedb543926c3f8d8baac266", @ANYRES64, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES32=r0]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) creat(&(0x7f00000000c0)='./file1\x00', 0x40) 04:21:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r3 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0xb100) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffffffffffffeff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) 04:21:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x28, 0x5, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3088.193566] loop4: detected capacity change from 0 to 40 [ 3088.200040] loop2: detected capacity change from 0 to 40 [ 3088.201887] loop3: detected capacity change from 0 to 40 [ 3088.218790] loop1: detected capacity change from 0 to 40 [ 3088.221157] loop7: detected capacity change from 0 to 40 [ 3088.231519] loop0: detected capacity change from 0 to 40 [ 3088.238239] loop6: detected capacity change from 0 to 40 [ 3088.244814] FAT-fs (loop7): Unrecognized mount option "18446744073709551615`#Q+S/Fn@AkJoLlV=q1{y 9rNF10vc%Sd!g! hCl?f017777777777777777777770x0000000000000000" or missing value [ 3088.257998] bio_check_eod: 4 callbacks suppressed [ 3088.258009] syz-executor.4: attempt to access beyond end of device [ 3088.258009] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.259992] buffer_io_error: 3 callbacks suppressed [ 3088.260000] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3088.286138] syz-executor.3: attempt to access beyond end of device [ 3088.286138] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.287221] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3088.295256] syz-executor.1: attempt to access beyond end of device [ 3088.295256] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.296320] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3088.312779] syz-executor.3: attempt to access beyond end of device [ 3088.312779] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.314044] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:21:42 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3e, &(0x7f0000000a40)={[{@gid}]}) [ 3088.345083] syz-executor.2: attempt to access beyond end of device [ 3088.345083] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.345151] loop7: detected capacity change from 0 to 40 [ 3088.346287] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3088.357651] FAT-fs (loop7): Unrecognized mount option "18446744073709551615`#Q+S/Fn@AkJoLlV=q1{y 9rNF10vc%Sd!g! hCl?f017777777777777777777770x0000000000000000" or missing value 04:21:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3088.397170] syz-executor.6: attempt to access beyond end of device [ 3088.397170] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.398386] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3088.399858] syz-executor.2: attempt to access beyond end of device [ 3088.399858] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.400922] Buffer I/O error on dev loop2, logical block 10, lost async page write 04:21:42 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(r0, &(0x7f0000000300)='./file1\x00', 0x80, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x80000) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000240)) [ 3088.490061] loop0: detected capacity change from 0 to 40 [ 3088.530098] loop4: detected capacity change from 0 to 40 [ 3088.584233] syz-executor.4: attempt to access beyond end of device [ 3088.584233] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3088.585313] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3103.487475] loop6: detected capacity change from 0 to 40 [ 3103.490043] loop4: detected capacity change from 0 to 40 04:21:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x48, &(0x7f0000000a40)={[{@gid}]}) 04:21:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000300)=""/110, 0x6e}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x43) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:21:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000300)=""/182, 0xb6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = openat(r1, &(0x7f0000000240)='./file1\x00', 0x80b42, 0x83) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 04:21:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='[\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:21:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f00000000c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) sendfile(r3, r0, 0x0, 0x1) 04:21:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x3f}, {0x0, 0x0, 0x2800}], 0x40010, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x309a84, 0x40) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xcaa}}, './file0\x00'}) recvmmsg(r4, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/207, 0xcf}, {&(0x7f0000002480)=""/47, 0x2f}, {&(0x7f00000024c0)=""/104, 0x68}], 0x5, &(0x7f00000025c0)=""/4096, 0x1000}, 0x101}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000035c0)=""/141, 0x8d}, {&(0x7f0000003680)=""/225, 0xe1}, {&(0x7f0000003780)}, {&(0x7f00000037c0)}], 0x4}, 0x9}, {{&(0x7f0000003840)=@nfc_llcp, 0x80, &(0x7f0000003dc0)=[{&(0x7f00000038c0)=""/154, 0x9a}, {&(0x7f0000003980)=""/37, 0x25}, {&(0x7f00000039c0)=""/131, 0x83}, {&(0x7f0000003a80)=""/233, 0xe9}, {&(0x7f0000003b80)=""/130, 0x82}, {&(0x7f0000003c40)=""/195, 0xc3}, {&(0x7f0000003d40)=""/91, 0x5b}], 0x7, &(0x7f0000003e40)=""/31, 0x1f}, 0x5}, {{&(0x7f0000003e80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005280)=[{&(0x7f0000003f00)=""/103, 0x67}, {&(0x7f0000003f80)=""/140, 0x8c}, {&(0x7f0000004040)=""/51, 0x33}, {&(0x7f0000004080)=""/127, 0x7f}, {&(0x7f0000004100)=""/18, 0x12}, {&(0x7f0000004140)=""/118, 0x76}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/154, 0x9a}], 0x8, &(0x7f0000005300)=""/195, 0xc3}, 0x4}, {{&(0x7f0000005400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005480)=""/232, 0xe8}, {&(0x7f0000005580)=""/171, 0xab}, {&(0x7f0000005640)=""/154, 0x9a}, {&(0x7f0000005700)=""/8, 0x8}, {&(0x7f0000005740)=""/88, 0x58}, {&(0x7f00000057c0)=""/115, 0x73}], 0x6, &(0x7f00000058c0)=""/120, 0x78}, 0xc00000}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005940)=""/245, 0xf5}, {&(0x7f0000005a40)=""/62, 0x3e}, {&(0x7f0000005a80)=""/88, 0x58}, {&(0x7f0000005b00)=""/83, 0x53}, {&(0x7f0000005b80)}, {&(0x7f0000005bc0)=""/42, 0x2a}], 0x6, &(0x7f0000005c80)=""/79, 0x4f}, 0x7}, {{&(0x7f0000005d00)=@l2tp6, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/142, 0x8e}, {&(0x7f0000005e40)=""/36, 0x24}], 0x2, &(0x7f0000005ec0)=""/119, 0x77}, 0x5}, {{&(0x7f0000005f40)=@ax25={{0x3, @bcast}, [@null, @bcast, @default, @default, @remote, @null, @rose, @bcast]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005fc0)}, {&(0x7f0000006000)=""/49, 0x31}], 0x2, &(0x7f0000006080)=""/141, 0x8d}, 0x45d0}, {{&(0x7f0000006140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/67, 0x43}, {&(0x7f0000006240)=""/77, 0x4d}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/70, 0x46}, {&(0x7f0000007340)=""/102, 0x66}, {&(0x7f00000073c0)=""/47, 0x2f}, {&(0x7f0000007400)=""/175, 0xaf}, {&(0x7f00000074c0)=""/183, 0xb7}, {&(0x7f0000007580)=""/224, 0xe0}, {&(0x7f0000007680)=""/45, 0x2d}], 0xa, &(0x7f0000007780)=""/186, 0xba}, 0x7}], 0x9, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6da3fe6f3366d8a02bd7f47d1f235272b1e38d57c126000440002000f801", 0x20}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3103.506809] loop0: detected capacity change from 0 to 40 [ 3103.510772] loop1: detected capacity change from 0 to 40 [ 3103.513271] loop7: detected capacity change from 0 to 40 [ 3103.557879] loop3: detected capacity change from 0 to 40 [ 3103.558897] loop2: detected capacity change from 0 to 40 [ 3103.560389] syz-executor.6: attempt to access beyond end of device [ 3103.560389] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3103.561593] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3103.584056] syz-executor.6: attempt to access beyond end of device [ 3103.584056] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3103.585125] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3103.588176] FAT-fs (loop2): Unrecognized mount option "`mo3fؠ+}#RrW&" or missing value 04:21:57 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x100010, r0, 0x1d3b0000) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000140)='./file1\x00', 0x200000, 0x1) sendfile(r2, r1, 0x0, 0xfffffdef) 04:21:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) pidfd_open(0xffffffffffffffff, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x80800, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:21:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3103.687834] loop4: detected capacity change from 0 to 40 04:21:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4c, &(0x7f0000000a40)={[{@gid}]}) 04:21:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x85c3, 0x140) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000300)=""/114, 0x72}], 0x1, 0x0, 0x62d8) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3103.776238] loop0: detected capacity change from 0 to 40 04:21:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000040)='./file2\x00') r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3103.813733] loop6: detected capacity change from 0 to 40 [ 3103.853665] syz-executor.4: attempt to access beyond end of device [ 3103.853665] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3103.854965] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3103.874088] loop7: detected capacity change from 0 to 40 [ 3103.885505] loop1: detected capacity change from 0 to 40 [ 3103.908302] syz-executor.4: attempt to access beyond end of device [ 3103.908302] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3103.910586] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:21:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x68, &(0x7f0000000a40)={[{@gid}]}) 04:21:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3103.987002] syz-executor.6: attempt to access beyond end of device [ 3103.987002] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3103.988364] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3104.031946] syz-executor.1: attempt to access beyond end of device [ 3104.031946] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3104.032985] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3104.072392] syz-executor.6: attempt to access beyond end of device [ 3104.072392] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3104.074468] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:21:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x0, 0x30, [0xdf, 0x3, 0x20, 0xd4], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x4, &(0x7f0000000240)=[{0x1, 0x7, 0xfc, 0x8}, {0x8, 0x0, 0x1f, 0x9}, {0x3f, 0x80, 0x2, 0x7}, {0x9, 0x27, 0x1, 0x2}]}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000340)) [ 3104.085648] syz-executor.1: attempt to access beyond end of device [ 3104.085648] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3104.086658] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3104.096399] loop0: detected capacity change from 0 to 40 04:21:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2804}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x311402, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) fdatasync(0xffffffffffffffff) r3 = dup2(r2, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r1, &(0x7f0000000300)='./file0\x00', 0x210200, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x4, 0x0, 0x0, 0x0, 0x445392d2, 0x281a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x40000, 0x7, 0x80, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x11f441, 0x0) [ 3104.147282] loop4: detected capacity change from 0 to 40 04:21:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6c, &(0x7f0000000a40)={[{@gid}]}) [ 3104.170249] loop7: detected capacity change from 0 to 40 04:21:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) acct(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x48480}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3104.327850] loop6: detected capacity change from 0 to 40 [ 3104.335676] syz-executor.7: attempt to access beyond end of device [ 3104.335676] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3104.336929] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3104.399252] loop2: detected capacity change from 0 to 40 [ 3104.405345] FAT-fs (loop2): Unrecognized mount option "`mo3fؠ+}#RrW&" or missing value [ 3104.408941] syz-executor.6: attempt to access beyond end of device [ 3104.408941] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3104.409949] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3104.414967] loop3: detected capacity change from 0 to 40 [ 3104.438938] Process accounting resumed [ 3104.549519] Process accounting resumed 04:22:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x80000001, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d7e64010110341e68d6044000", 0xf}, {0x0, 0x0, 0x9}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x40, 0x7}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r3, @ANYRES32], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3119.500453] loop1: detected capacity change from 0 to 40 [ 3119.518670] loop4: detected capacity change from 0 to 40 [ 3119.521063] loop2: detected capacity change from 0 to 40 04:22:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x74, &(0x7f0000000a40)={[{@gid}]}) 04:22:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:22:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380)=""/156, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) openat(r2, &(0x7f0000000240)='./file1\x00', 0x1d1000, 0x40) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x73d2771d499bde94, 0x88) 04:22:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x6f3a, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000340)="034be05fdaed3320b5e5f22817b4c615d36f36e34fadef656c40152ddaae3ff65da03880b7b866004df93bdf92a574357c16415bc36c9b36346031f97eb7b925c721fc21e149431c3d15e3afac25db9cda493a7b0b11d33f299dccfa508472f907ae9aa3162be1b0db4c1048114ca9d662830b430fbf04e9e91dcc5330b428945de32f7db1c7d1001944cd3a3bb10dda875dd173caae5ae476f80e4858e01def05a4eb80a47ec5299b296fc3956f18bccf964ff70119c8c9", 0xb8, 0x6}, {&(0x7f0000000400)="8d8aeaeaf5a35a455cbec780cdc6c355540c6f6281f35cb3337181ea57f8047893890efb79ecf2a04df247aad3fdeb1cf6cefb800fcf2efb0902fa2f5b9c2fa6fd563cb6b860da4cda11b53a23e7ad5badf3", 0x52, 0x1000}, {&(0x7f0000000480)="44275b5b69082a561306aad639f49b254e4718", 0x13, 0x10001}, {&(0x7f00000004c0)="7f2511c749debc8fef4fd66ed3e7db66e3353bb04cb8bdde6c56b34a076829e34a1904856758add1bb6eb548729ed286c6df48c4d75cbb60231a622ccc51b9e54a82da1efbdbedce10b1c922edafd5d0deaf728edb8e8d13dfa3cb56d727cf4e4809f343c6e84e10bea67d2bf101cd34da9b8f593ceb7db31d630677a5c7ee324ee4d74610145fb269685d94478aef92ef8ac4f2", 0x94, 0x3bfdbca1}, {&(0x7f0000000580)="3bd7df32ce9489df4e5e8c812774b4a2e203e802c298b2ae3bd4189c535e7a1fe9f0ca3387440376c34d88c895e5f96f2375b859524db13f26b7d2", 0x3b, 0x1}], 0x1000, &(0x7f0000000640)={[{}], [{@dont_appraise}]}) getdents64(r3, &(0x7f0000000680)=""/175, 0xaf) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3119.539031] loop0: detected capacity change from 0 to 40 [ 3119.558328] loop3: detected capacity change from 0 to 264192 [ 3119.587380] FAT-fs (loop3): bogus number of reserved sectors [ 3119.588278] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3119.608018] loop6: detected capacity change from 0 to 40 [ 3119.626039] bio_check_eod: 3 callbacks suppressed [ 3119.626054] syz-executor.2: attempt to access beyond end of device [ 3119.626054] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3119.628018] buffer_io_error: 1 callbacks suppressed [ 3119.628030] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3119.633207] syz-executor.4: attempt to access beyond end of device [ 3119.633207] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3119.634793] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3119.635060] loop7: detected capacity change from 0 to 40 04:22:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7a, &(0x7f0000000a40)={[{@gid}]}) 04:22:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3119.735388] syz-executor.1: attempt to access beyond end of device [ 3119.735388] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3119.737558] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3119.757182] syz-executor.6: attempt to access beyond end of device [ 3119.757182] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3119.759397] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:22:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) pwrite64(r1, &(0x7f0000000300)="95484f5048d44e02808f9d680d70afee1c055c38492ae9bb7b4d06f4c5e7b61819502e780d2b2bde1c333e97d23af4b9e1bbe04a02df56f33cac8343860bf388bb3fbf095ac89330936bc92602362a710c264ab58480e1fc0bbbcf3a7a0176e214552a7eddd7b9a0e22ea6591e18a7fec99050546aa9171b83ed2e835facf2b4d2227798c2c6f2e240cfb3ad341d6618b01146fa8f4ff060de491d1afe22aef7a7be65503fd134535541f51ae946ff7ab2c7", 0xb2, 0x9118) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x15182, 0x7, 0x3ff, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0xb2900, 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x4252}, 0x0, 0x10, r3, 0x11) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfb, 0x9a, 0x1, 0xc8, "feb59375e8b4d5af3b2d41d337b17b68", "fb22519015d66b6069267cc285ef965dce03567b10b2e27351e34d4de914caea931de5192b63defcebc375d68c29906072996d3334ab7f341b9abe50998b7d87fb489d2ca67fa6446f2b6d72cc4f3568cedefc08fe7f8b504047fac347b86cc5d4559ae460259a2941676bf9e1b073e06eea36891ca209018f5665b7179f9bf13b33ee104f"}, 0x9a, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000140)='./file1\x00', 0x10400, 0xd5) 04:22:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = open_tree(r0, &(0x7f0000000140)='./file2\x00', 0x48001) openat(r1, &(0x7f0000000180)='./file0\x00', 0x402800, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3119.853608] syz-executor.1: attempt to access beyond end of device [ 3119.853608] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3119.855464] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:22:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105043, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3119.865860] loop0: detected capacity change from 0 to 40 [ 3119.933106] loop2: detected capacity change from 0 to 40 04:22:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfe, &(0x7f0000000a40)={[{@gid}]}) [ 3120.034672] loop4: detected capacity change from 0 to 40 [ 3120.065179] loop7: detected capacity change from 0 to 40 [ 3120.107919] syz-executor.4: attempt to access beyond end of device [ 3120.107919] loop4: rw=2049, sector=100, nr_sectors = 4 limit=40 [ 3120.118794] syz-executor.2: attempt to access beyond end of device [ 3120.118794] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3120.120906] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3120.136198] syz-executor.4: attempt to access beyond end of device [ 3120.136198] loop4: rw=2049, sector=100, nr_sectors = 4 limit=40 [ 3120.149783] syz-executor.4: attempt to access beyond end of device [ 3120.149783] loop4: rw=2049, sector=100, nr_sectors = 4 limit=40 [ 3120.166689] syz-executor.2: attempt to access beyond end of device [ 3120.166689] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3120.168320] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3120.400285] loop3: detected capacity change from 0 to 264192 [ 3120.409744] FAT-fs (loop3): Unrecognized mount option "./file1" or missing value 04:22:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000400)="601c6d6b646f7364fdffffffffffffff28d55e00000000000000", 0x1a}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x401}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x53, 0x2, 0x0, 0x9, 0x0, 0x6, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x4021a, 0x2, 0x1, 0x3, 0x5, 0xc9, 0x1, 0x0, 0x5, 0x0, 0x81}) lstat(&(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0xee00) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(0x0, 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3136.063272] loop0: detected capacity change from 0 to 40 [ 3136.065860] loop3: detected capacity change from 0 to 40 [ 3136.075898] loop1: detected capacity change from 0 to 40 [ 3136.076879] loop2: detected capacity change from 0 to 40 [ 3136.085479] loop7: detected capacity change from 0 to 40 04:22:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0xa7, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="fec11af2da2e793ce548db90dcda091f370d5238a80f6889e90f731a0630446e52372eb7ee80659f3226c336d0ea8442c95868c3704e1da4619c409a9e793bf213dbdf80c3252ab966f187750eb6f01ae66c5340be26af44049fc469f06f84d0bac041b348aa16a35be6a7239053b66edf474bb0d16373055579a8", 0x7b, 0x5}, {&(0x7f0000000240)="87fd79ec95b58a30bd331ceb29708691eff5688366c658fa7c0bb86ebfecce6e083719ad", 0x24, 0x80000001}, {&(0x7f0000000380)="eea5fcd4176e217b793121127badcf3c6f0b2012738e088f41315d1be028d2278025fceb70fafc90587693a0b0db1237320d20e9b2b00e1f487dcac89b63d988541fa825c047b61f28a3cffeeb823e13c9bfdb5a439b94537999b4c7865eea7659ec53ddc6aeedc4283d4541edfa6a4e43a12b537aa2347ef44365683e3315eae64c75ed2f606c0fa9de6dceb7f3d3b3d9ff9548d1f95a4f448291556fa4a03d7a137736190e2c47b7af3d95bbe780942707d6cfab64e970d71a79fde10325ce1c878df1de37c87ff6fbd6849153a73c22e6e70c", 0xd4, 0x7fffffff}], 0x800040, &(0x7f0000000500)={[{@rodir}], [{@subj_type={'subj_type', 0x3d, ']'}}]}) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) listen(r3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r3, 0x7cd57000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x300, &(0x7f0000000a40)={[{@gid}]}) 04:22:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 04:22:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000380)) write$P9_RREADDIR(r2, &(0x7f0000000300)={0x42, 0x29, 0x2, {0x8, [{{0x40, 0x1}, 0x7fffffff, 0x4}, {{0x20, 0x4, 0x6}, 0x2b40, 0x3, 0x7, './file0'}]}}, 0x42) fdatasync(r2) openat(r1, &(0x7f0000000240)='./file2\x00', 0x200080, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:29 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r4) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x1492c, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240), 0xb}, 0x2049, 0x6, 0x7ff, 0x2, 0x400000000000, 0x400, 0x81, 0x0, 0x3, 0x0, 0x231}, r3, 0x5, r1, 0xb) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3136.119289] loop6: detected capacity change from 0 to 40 [ 3136.139186] loop4: detected capacity change from 0 to 40 [ 3136.192687] syz-executor.1: attempt to access beyond end of device [ 3136.192687] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3136.194863] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3136.213033] syz-executor.7: attempt to access beyond end of device [ 3136.213033] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3136.215364] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:22:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(0x0, 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3136.373748] syz-executor.4: attempt to access beyond end of device [ 3136.373748] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 04:22:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3136.375908] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3136.389896] syz-executor.2: attempt to access beyond end of device [ 3136.389896] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3136.392163] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3136.482004] loop1: detected capacity change from 0 to 40 04:22:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x500, &(0x7f0000000a40)={[{@gid}]}) 04:22:30 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1/file0\x00'}) write$P9_RREADLINK(r4, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)) [ 3136.560784] loop0: detected capacity change from 0 to 40 04:22:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x600, &(0x7f0000000a40)={[{@gid}]}) [ 3136.666108] loop7: detected capacity change from 0 to 40 04:22:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) accept$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000140)=0x6e) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) write(r3, &(0x7f0000000300)="1d4b", 0x2) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x3e1100, 0x151, 0x4}, 0x18) openat(r5, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x84040, 0x109) [ 3136.757949] syz-executor.1: attempt to access beyond end of device [ 3136.757949] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3136.760724] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:22:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(0x0, 0x45) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) [ 3136.797581] loop2: detected capacity change from 0 to 40 [ 3136.905374] loop4: detected capacity change from 0 to 40 [ 3136.934621] syz-executor.7: attempt to access beyond end of device [ 3136.934621] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3136.937033] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3136.961368] loop0: detected capacity change from 0 to 40 [ 3136.964975] loop3: detected capacity change from 0 to 40 [ 3137.013141] syz-executor.2: attempt to access beyond end of device [ 3137.013141] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3137.015155] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3137.164946] syz-executor.4: attempt to access beyond end of device [ 3137.164946] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3137.167082] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:22:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x40, 0x80) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f00000000c0)='./file0/../file0\x00') r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x601, 0x6) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x230100, 0x1e4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(r1, &(0x7f0000000300)='./file0\x00', 0x20000, 0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x1002, 0x800000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', 0x2, 0xa4509bef9e045342) 04:22:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x700, &(0x7f0000000a40)={[{@gid}]}) 04:22:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000240)='./file0\x00', 0x20000, 0x111) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1e0}, 0x1c) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f00000003c0)='./file1/file0\x00', r1, &(0x7f0000000400)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x28a1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000300)) 04:22:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x6, 0x8, 0x8, 0x0, 0x1, 0x8d40d, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x0, 0x3, 0x6, 0x1, 0x6, 0x3, 0x480, 0x0, 0x3, 0x0, 0x1513}, 0xffffffffffffffff, 0xc, r4, 0x2) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3149.891201] loop1: detected capacity change from 0 to 40 [ 3149.897910] loop2: detected capacity change from 0 to 40 [ 3149.904003] loop4: detected capacity change from 0 to 40 04:22:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 04:22:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffffc9, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x187, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3149.915561] loop7: detected capacity change from 0 to 40 [ 3149.948367] syz-executor.4: attempt to access beyond end of device [ 3149.948367] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3149.949283] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3149.955948] loop3: detected capacity change from 0 to 40 [ 3149.958717] loop0: detected capacity change from 0 to 40 [ 3149.963676] syz-executor.2: attempt to access beyond end of device [ 3149.963676] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3149.964707] Buffer I/O error on dev loop2, logical block 10, lost async page write 04:22:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x900, &(0x7f0000000a40)={[{@gid}]}) [ 3149.972821] syz-executor.4: attempt to access beyond end of device [ 3149.972821] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3149.973741] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3149.975061] FAT-fs (loop6): bogus number of reserved sectors [ 3149.975716] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3149.990384] syz-executor.2: attempt to access beyond end of device [ 3149.990384] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3149.991383] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3150.038672] syz-executor.7: attempt to access beyond end of device [ 3150.038672] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.039973] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3150.069053] syz-executor.1: attempt to access beyond end of device [ 3150.069053] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.070889] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3150.072593] syz-executor.3: attempt to access beyond end of device [ 3150.072593] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.073986] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3150.081611] syz-executor.7: attempt to access beyond end of device [ 3150.081611] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.082898] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:22:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) statfs(0x0, &(0x7f0000000340)) [ 3150.120807] syz-executor.1: attempt to access beyond end of device [ 3150.120807] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.122325] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:22:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x15182, 0x7, 0x3ff, 0x0, 0x800000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:22:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3150.173875] loop4: detected capacity change from 0 to 40 04:22:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xa00, &(0x7f0000000a40)={[{@gid}]}) [ 3150.252341] loop2: detected capacity change from 0 to 40 [ 3150.252999] loop0: detected capacity change from 0 to 40 04:22:44 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x100, 0x1, 0x4}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r2}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) 04:22:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2a0000, 0x4) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) accept$unix(r3, &(0x7f0000000240), &(0x7f0000000180)=0x6e) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x8040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffefffbfff, r0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3150.397817] loop3: detected capacity change from 0 to 40 [ 3150.410642] syz-executor.2: attempt to access beyond end of device [ 3150.410642] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3150.413752] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3150.476820] loop7: detected capacity change from 0 to 40 [ 3150.811821] FAT-fs (loop6): Unrecognized mount option "net/tcp" or missing value 04:23:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) statfs(0x0, &(0x7f0000000340)) 04:23:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r4, r5, r6]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:00 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f00000000c0)='./file1\x00', 0xc8000, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xb00, &(0x7f0000000a40)={[{@gid}]}) 04:23:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) fallocate(r3, 0x2c, 0x4, 0x6) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/sctp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) rt_tgsigqueueinfo(r4, r4, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x9, 0x4, 0xff, 0x7, 0x0, 0x10000, 0x80, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x1, 0x3, 0x3, 0x10001, 0xfffffffe, 0x1ff, 0x0, 0x81, 0x0, 0x80000001}, r4, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') setxattr$security_selinux(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x6) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fffffff, 0x5515c0) openat(r0, &(0x7f0000000240)='./file1\x00', 0x0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r0, &(0x7f0000000240)='./file1\x00', 0x10400, 0x188) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3166.399132] loop2: detected capacity change from 0 to 40 [ 3166.404380] loop3: detected capacity change from 0 to 40 [ 3166.423318] loop0: detected capacity change from 0 to 40 04:23:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1020, &(0x7f0000000a40)={[{@gid}]}) [ 3166.431811] loop4: detected capacity change from 0 to 40 [ 3166.432062] loop7: detected capacity change from 0 to 40 [ 3166.451967] loop1: detected capacity change from 0 to 40 [ 3166.488922] bio_check_eod: 3 callbacks suppressed [ 3166.488940] syz-executor.3: attempt to access beyond end of device [ 3166.488940] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.491802] buffer_io_error: 3 callbacks suppressed [ 3166.491817] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:23:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) statfs(0x0, &(0x7f0000000340)) [ 3166.682717] syz-executor.1: attempt to access beyond end of device [ 3166.682717] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.685384] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3166.699598] loop0: detected capacity change from 0 to 40 [ 3166.708275] syz-executor.7: attempt to access beyond end of device [ 3166.708275] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.710032] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:23:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x2000, &(0x7f0000000a40)={[{@gid}]}) [ 3166.759991] syz-executor.1: attempt to access beyond end of device [ 3166.759991] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.761838] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:23:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200400, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)='vfat\x00', 0x5, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x4, &(0x7f0000001600)=[{&(0x7f0000000440)="a66d04ae91e0de0ec86b5c5575edee1c480dea960ca41c18c0146433cea497e486962c408a5b111c3210001e1e85d51332dc5fb1b96223c392c18c52330ab4a2a14e199bff2908ea613f6f9661c84d48d55cbac20d60a6f3eb0c17081e6c455f1be7c2a36f27beadd3faf6d95bb3c226146ae74656b1eb5de49d2fed4caa75ddab3c2e7805a6487c86b8b7eebcbb5f416f2b4a6f1e6b02003d0037b88808f057d4a39a81", 0xa4, 0x4}, {&(0x7f00000017c0)="bdefed79a86d0b403ea34b7896839fbef7f26717064abe3fe39f9bc39fd987983185cdd9fd9f4fc56992c20803b50ad6c04413e638c6fe72b1f637d8a60fe0d9baa908c541bdd43f200785edbf3fb4d2eaeb17d296c11bc47fcb5af80d6454f237753df929a3ac60ddf6e74e2ab39bf540dd353d2fcbc74f06b0604ef55b16d14d840e356540c3e097cc74bae879d61aaedbe00c3ef08e68b4588e732b2c551a5fbb1aa5477799f826a5631d452f62a6d739770c0d7bc07863d9b92b7b362595af982fc4871bd69757b16b6552618837371667ba39c7930d8edb0a990a578f6942bdf4c3ea", 0xe5, 0x9a}, {&(0x7f0000000540)="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", 0x1000, 0x40000000004}, {&(0x7f0000001540)="02e681ee94487a8f2082f852999f422076e712cd4eee6577067cd00c6f6f476d4e14c0a96f1070bebcb0035365e7bfc773d065ba1cf4acc5d8c44b008b0b29e829cb0bb0daab3e44211bc14a752e8247e22e0371b40f0b941df69a06c738a49001e03c8f9a100c7a0292ae00ddabc6974573cff122aebbaa63ac0387dc674ae7d09e920222632c397519c012ac5ff586fb23203d958d24e5dde9e578507bed7d1e6d06e6229713", 0xa7, 0x86}], 0x1024040, &(0x7f0000001680)={[{@rodir}, {@utf8no}], [{@smackfsdef}, {@fsmagic={'fsmagic', 0x3d, 0x44a}}]}) ppoll(&(0x7f0000001700)=[{r2, 0x4000}, {r3, 0x8000}], 0x2, &(0x7f0000001740)={0x77359400}, &(0x7f0000001780)={[0x1]}, 0x8) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb}, 0x8400, 0x7, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xfc, 0x5, 0x6, 0x8, 0x0, 0x907, 0x40020, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7c, 0x4, @perf_config_ext={0x1, 0x800}, 0x0, 0x0, 0x8, 0x5, 0xffff, 0xfffffffb, 0x1, 0x0, 0x6, 0x0, 0x4234}, 0xffffffffffffffff, 0x5, r4, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() lsetxattr$security_capability(&(0x7f0000000500)='./file2\x00', &(0x7f00000016c0), &(0x7f00000018c0)=@v3={0x3000000, [{0xb9, 0x4}, {0x10000}], r5}, 0x18, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3166.881586] loop3: detected capacity change from 0 to 40 04:23:00 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101242, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0xa6}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f0000000140)='./file1\x00', 0x400000, 0x20) fdatasync(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r4 = accept(r3, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000380)={{r1}, "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"}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001380)=0x0) getpgid(r6) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x15182, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3166.921818] loop4: detected capacity change from 0 to 40 04:23:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x2010, &(0x7f0000000a40)={[{@gid}]}) [ 3166.970018] syz-executor.3: attempt to access beyond end of device [ 3166.970018] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.971842] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3166.997071] syz-executor.3: attempt to access beyond end of device [ 3166.997071] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3166.999145] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:23:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) statfs(&(0x7f0000000300)='./file0\x00', 0x0) [ 3167.024178] loop7: detected capacity change from 0 to 40 04:23:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000040)='./file1\x00', 0x0, 0x20) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3167.041242] FAT-fs (loop2): bogus number of reserved sectors [ 3167.042233] FAT-fs (loop2): Can't find a valid FAT filesystem 04:23:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c0, 0x6e}}, './file1/file0\x00'}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3167.105045] loop0: detected capacity change from 0 to 40 [ 3167.121672] loop1: detected capacity change from 0 to 40 [ 3167.172381] syz-executor.4: attempt to access beyond end of device [ 3167.172381] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3167.174774] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3167.342712] loop3: detected capacity change from 0 to 40 04:23:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3100, &(0x7f0000000a40)={[{@gid}]}) 04:23:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0xd2) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fgetxattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472752f00000000000000000000000afeb4b960553b20e4b1c4328e040febeaa0a33a17a7056518ad03a6aafba10e9d5709e7a44262d0bc050b30394a6ded804b537729ada77c76f9695818266a0b89d90bfbbbe03a65aec6674b697069224034f3f104bd2d7ec954cb20e03d67e2630452e6327da24827af9c876a6685761a0100862c0c1cf1afeb4612b2c95760ba177cda1d5affaaa814585b0601cd289db5c2e26ce4dc1621769fe8b293250b2b96ef95c1fe6547e74200d2e5e66bc84a5505d81c8480a223d5"], &(0x7f0000000300)=""/138, 0x8a) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r5, 0x800, 0x100000001, 0x3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 3167.435869] syz-executor.1: attempt to access beyond end of device [ 3167.435869] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3167.437397] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3167.473317] loop7: detected capacity change from 0 to 40 [ 3167.485179] syz-executor.3: attempt to access beyond end of device [ 3167.485179] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3167.486838] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:23:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x174) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r2, &(0x7f0000000240)='./file1\x00', 0x80000, 0x4) fdatasync(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x1, 0x2cd, 0x2930) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:01 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r4, r5, r6]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3167.523475] loop0: detected capacity change from 0 to 40 [ 3167.535096] syz-executor.3: attempt to access beyond end of device [ 3167.535096] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3167.536742] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:23:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x989ec066732665b5, 0x8a) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000240)='vfat\x00', &(0x7f0000000300)='}:&\'/\x00', &(0x7f0000000340), &(0x7f0000000380)='-&@&)*%\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='*\x00', &(0x7f0000000480)='-$#+\x00', &(0x7f00000004c0)='-\'\x00'], &(0x7f0000000780)=[&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='vfat\x00', &(0x7f0000000640)='vfat\x00', &(0x7f0000000680)='@--x,&\x00', &(0x7f00000006c0)='t@$\x00', &(0x7f0000000700)='vfat\x00', &(0x7f0000000740)='vfat\x00'], 0x500) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff809}, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3167.640252] loop6: detected capacity change from 0 to 40 04:23:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3e00, &(0x7f0000000a40)={[{@gid}]}) [ 3167.701606] loop3: detected capacity change from 0 to 40 [ 3167.724373] loop1: detected capacity change from 0 to 40 04:23:01 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r4, r5, r6]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3167.938251] loop0: detected capacity change from 0 to 40 [ 3167.939755] FAT-fs (loop2): Unrecognized mount option "./file1" or missing value 04:23:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) mkdir(&(0x7f0000000240)='./file0\x00', 0x18) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x727c3c41, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:15 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, r4, r5, r6]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000240)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x6000, @fd_index=0x9, 0x7, 0x9, 0x1}, 0x40) 04:23:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) openat(r4, &(0x7f0000000180)='./file0\x00', 0x402a41, 0x101) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) syz_open_dev$mouse(&(0x7f0000000140), 0x1ca3f918, 0x10000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3f00, &(0x7f0000000a40)={[{@gid}]}) 04:23:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x2, 0x0, 0x7, 0x400, 0x400}, 0x14) fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x15182, 0x7, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, r1, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3181.397773] loop3: detected capacity change from 0 to 40 [ 3181.399541] loop2: detected capacity change from 0 to 40 [ 3181.402457] loop6: detected capacity change from 0 to 40 [ 3181.408153] loop7: detected capacity change from 0 to 40 [ 3181.410209] loop4: detected capacity change from 0 to 40 04:23:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4000, &(0x7f0000000a40)={[{@gid}]}) [ 3181.439368] loop1: detected capacity change from 0 to 40 [ 3181.488952] bio_check_eod: 4 callbacks suppressed [ 3181.488966] syz-executor.3: attempt to access beyond end of device [ 3181.488966] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.490827] buffer_io_error: 4 callbacks suppressed [ 3181.490837] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3181.504864] syz-executor.7: attempt to access beyond end of device [ 3181.504864] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.506396] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3181.510876] loop0: detected capacity change from 0 to 40 [ 3181.539968] syz-executor.6: attempt to access beyond end of device [ 3181.539968] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.554735] syz-executor.3: attempt to access beyond end of device [ 3181.554735] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.556091] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3181.578832] syz-executor.6: attempt to access beyond end of device [ 3181.578832] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 3181.596249] syz-executor.6: attempt to access beyond end of device [ 3181.596249] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 3181.636746] syz-executor.4: attempt to access beyond end of device [ 3181.636746] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.638211] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3181.677159] syz-executor.2: attempt to access beyond end of device [ 3181.677159] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.678495] Buffer I/O error on dev loop2, logical block 10, lost async page write 04:23:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10042, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x536b}}, './file0\x00'}) finit_module(r4, &(0x7f0000000240)='\x00', 0x2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3181.765282] loop7: detected capacity change from 0 to 40 [ 3181.960917] syz-executor.7: attempt to access beyond end of device [ 3181.960917] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3181.962961] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:23:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x1000, 0x3, &(0x7f0000000480)=[{&(0x7f0000000340)="1e6812b6ad18b289308aebfe321fa0fb612a800f04c1b086f9ad271674be1c87614f143ba6602c", 0x27, 0x8}, {&(0x7f0000000380)="a55397f52b2417126ca53cb0d4b39e73072eb12f1252527efc57e68204bf123c7c17186582cdcb71f0b0cc296140612cf74feda354b73b8a1241fc9adde8a98c5712338a3c7beb39b96cb9f97895aff3", 0x50, 0x1000}, {&(0x7f0000000400)="fc2268d5b093d2c9814e1938878cc9a7207d4dec675f809e137ff90822b75ad17aba144aee5e9788c75a6c74ca2c4890790ae2fa9790943c608ed8672b13e751c7272f9eeb87ec99cb4ed37d33f082a8e66f76f325989c62af7f9f18f374fb5a", 0x60, 0x8bdf}], 0x80004, &(0x7f0000000500)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x32, 0x33, 0x65, 0x31]}}, {@huge_always}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) signalfd4(r1, &(0x7f0000000240)={[0x7]}, 0x8, 0x80800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x400c1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000000000000004979f425a7936a8befbd038fe77a13ca1ef5df862849ce2668a07b18af20640f559a19f836b97b"]) [ 3202.631250] loop1: detected capacity change from 0 to 40 [ 3202.639195] loop6: detected capacity change from 0 to 40 [ 3202.650852] loop3: detected capacity change from 0 to 40 04:23:36 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r3, r4, r5]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:23:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="37000000d24dc71834c19de7c8d924b9586d0d6271651a50e3f059b55a2685d15b884ab2ad13c655e5", @ANYRES16=r0, @ANYBLOB="000325bd7000ffdbdf251d0000000c009900000000001f0000000c0099000900000026000000"], 0x2c}}, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) read(r3, &(0x7f0000000300)=""/122, 0x7a) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x200}}, './file1\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r4, &(0x7f0000000480)='./file0\x00', 0x141, 0x64) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x2c00, 0x7, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf36, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fc}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file2\x00', 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4800, &(0x7f0000000a40)={[{@gid}]}) [ 3202.688884] loop7: detected capacity change from 0 to 40 [ 3202.705260] loop0: detected capacity change from 0 to 40 [ 3202.708075] loop4: detected capacity change from 0 to 40 [ 3202.748035] syz-executor.3: attempt to access beyond end of device [ 3202.748035] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3202.750053] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3202.755704] syz-executor.7: attempt to access beyond end of device [ 3202.755704] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3202.757933] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3202.795919] syz-executor.6: attempt to access beyond end of device [ 3202.795919] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3202.797929] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:23:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x662e, &(0x7f0000000140)={0x0, 0x5a4e, 0x4, 0x2, 0x2aa, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r1, 0x6, &(0x7f0000000340)="f0365698f083edba3a77b5021408c192f100e4f7f78a53e9acb1386af080e9f3087924dfdb3feb3eb6", 0x29, 0x8}, 0x400) listen(r3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008000000", @ANYRES32=r6], 0x58}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="3a7bf171c88e6198aa8cd9fecf0b28855c02a86bfd143fd37c2b397aa348de4f20526bf468680f6f43acb6c61835080d49e131485dc87448cbea6308976fac0d325ea0e0bef86a8e0bcd87e16e559dfd5dc5a5ca", 0x54}], 0x1, &(0x7f0000000480)=[{0x100, 0x84, 0x6f80, "c032a78729aa1009319c4ca66115d4628fa09d3ca79b291fc6bae8992881fe2358f0b41c5bb6174a96e19e0cde05532b51e4152b3405de403d6a2584fde73835b006c2c01433ab1bb1e868040e3151b9a87677c0ba638cfc447303dd2ca8d9fc4704196f92800dcdc6e37505f830f8b9a5335d83bba0fee44466bd062986ac107bf679cb0440193552d45c034694a81c7783dfee7c689b1654e63ffdb44dc2f0cd26691b38492f05096c5f3aae87da1c613f15853c1e34c68a8893d0b2f0f1e69004cfa86eb25f88f7e5228e478e78dc317033e4f43f4b015f09b08cae6074a94db322eea8cccee36ce6bf7d91"}, {0x18, 0x0, 0x0, "599029857f270a"}, {0x40, 0x1, 0x3f, "2d5a03045fe743081a7f509a60ed32c8c8cb4e82fa210d4f823692f68d27bd3796c376f6b09baf1de479b51c366a"}], 0x158}}, {{&(0x7f0000000600)=@xdp={0x2c, 0x1, r6, 0x2}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="695018045effaa39735900d8f02e5d52eb9c5d28b70f07b2cc7b92612db306fd4033814a63d6cb0406fe23a6e0c8af9b15d347550e99ec4dfe9590abb235ef00e95b2f341106b61a223117ae4181f443eb73c774d10c7910a16bae04a00b199c1231bff1ee7b5965d4a3392f30517c6d508024f62495c3b761a120dc30e594b3f97aeb0b405a996a85a0e2ff1b2ce6b5b2944c85dc5252568e003fff74d4df19477bda182eaabdef99c5767069269fd0fafdcf8d294a6ff6bdcfff5d7298d43386d87d43ca0005dddc637cb610c967ecb2", 0xd1}, {&(0x7f0000000780)="bbe7dc177f17f7f3b0f89ff78af5663145c9a9ab562338cea053b4c17330e4ab341b452b8eda3f622a3d0f1a44ff81fb0175b0fb845f1d88a4c77f2bc30c695489c4ad6a24d1bfd25f293c01889e500e6e67b981007d26b481d23efa345b3463865c31b4b6c15ddb42034dcb8b429d24af17bd91bf7e5072b43ec630578da34ff853030b93645277d7782357059968ceb4d7503a34a7c7df07425065567313d0248032bc1fdc734825396ae97368393e2ea909424a8117c3c958", 0xba}, {&(0x7f0000000840)="840ef586539825911156086c1f8528263f12a5ba6668fe775968cf1f9c9da6679fb2097dc63a38c5eb8bd66d2bd1b5344d6636", 0x33}, {&(0x7f0000000880)="c65c5c6064dec8889733b567700c955005b9df0edd5f186a9b1ee21d8dbb4dd915febb9d768f74a3e2c311f7e9e9497187f335c42c27ab5500d38b55c8dd038f9104ab1a34deeef0651ea45550aa24572b8f59a695e82c013f6e8d05955edb5b16154382420c7f91e892940398ef3dc0992782e56e5156d98183a40332e621983e43aa367990d228ac6fff", 0x8b}], 0x4, &(0x7f0000000980)=[{0x90, 0x10e, 0x81, "6f91024ea38c7664943d42a634ca0ef362c220debb891cb6c609f4930e409199d8be77a7f08539ba43835311d5d57fbcbbbe47d71bf707d8db2dcaf9b858f65063b820fb3d6dba56a9c098896163709bedb3e3b133770969265d09da3838b0d72691a185d62b0fdbfe1abc28ea98223558448bcbd23aed687c389049727c8212"}], 0x90}}, {{&(0x7f0000000a40)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=[{0x60, 0x84, 0x8, "6f8eea5d9d2a2594a6380a4c6aa52e53c67b4ffda2197f124cf94d6103098dccb221763d9be72051b002348f0b10b65f5018b3421c47c07d3bf2da2e0d37323bab761cddf9c6486199e817"}], 0x60}}], 0x3, 0x20000000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3202.955883] syz-executor.4: attempt to access beyond end of device [ 3202.955883] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3202.957672] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3203.541859] syz-executor.4: attempt to access beyond end of device [ 3203.541859] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3203.543759] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3219.314856] loop0: detected capacity change from 0 to 40 [ 3219.317347] loop4: detected capacity change from 0 to 40 04:23:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mmap$perf(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x3000008, 0x100010, r3, 0x1) openat(r4, &(0x7f0000000140)='./file0\x00', 0x900, 0x1) acct(0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a7143, 0x10c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2000000000000007}}, './file2\x00'}) openat(r3, &(0x7f0000000180)='./file0\x00', 0x80040, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6}, './file2\x00'}) 04:23:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4c00, &(0x7f0000000a40)={[{@gid}]}) 04:23:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xc0000, 0x0) sendto$unix(r0, &(0x7f0000000240)="c29b54aaf72bb27d3d3c6bb0fe81", 0xe, 0x0, &(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = accept4$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @none}, &(0x7f00000003c0)=0xe, 0x80000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r4, 0x81, {0x0, r5}, 0x10000, 0x0, 0x0, {0x0, r6, r3}}, 0x3ff) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:23:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1/file0\x00'}) ioctl$TCGETS(r0, 0x5401, &(0x7f00000004c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv2(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/133, 0x85}], 0x2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:23:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000740), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x440, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {0x6}, [@nested={0xf9, 0x79, 0x0, 0x1, [@generic="2b132d89b72dba22a2edf942c97af62b60a06b629ef8fad334300b7c38d5db0dca78b4795a59920748b1404f0231b4a99bc0f59fcff7366c05f17895d9b4c533a2ae37b570edf8e50b432b1e1411b9cac3a48cd3e2111892bffde987e88dbc0f8ea3a0c40a3f3b9d92c208acc3afc2b9a2872a58", @generic="f12741258c86cce4ba7e9f1a9d81fb811126c55bcdcea3fdacae4edccc509c38f0f743eaec9b25b0c501c10618c5069de69889dd93552cacc55d61e0cfee974a7185e01ccd3664da517dd454f8e5779e1768441250aec23ebcc5cb8d2d798be3008e46b98e5e8bfa812d2ada1ba951a1ec161dd461636393bf7a1e7aec24ac48e0"]}, @nested={0x13a, 0x17, 0x0, 0x1, [@generic="96f26889499da0e3fdc94c62bdb12efa44bfdf8def45777a89ac97619dadf789fc", @generic="20f4fa0345633ca31ca9f89735b2e9fa78fa7b9493d2cc1bc9cb5cbffb03c65bdd5bde98d44b72ae72794c5bffb57cee50650413f6ef81324abce6b116db8314d4594c84abd595b638686b0e3c80806fa237a81a1a360dce36", @generic="59519e3862edf8f45237ad6bdeec0c16d0f6535175cb88671cf0630b02a1e3d056103ae89c30ba27316807d6750fe6c11690d5e5f4ff8543210544522694a0a70b9ac4d1f9d3977639899166d2ac0c549fa05af16731a43f90e8af0ba634bfb3ab11b4296c723b80df7d1c7e8ee38f8abc57fe039733895c7b3121db6c35cd1ee716de83b120f83e57c7385fd2fc91cae58bcce3ea61d871b2d88397252cdc79b7e54d102c2dbf1b7eb33a8982764dba", @typed={0x8, 0x85, 0x0, 0x0, @u32}, @typed={0x4, 0x5}]}, @generic="aecf0aab02d429db2d9cee48f8f84668469164b46252202b458f1be22257bbe9af6617fc5f4fef10ca70b4bf7dd082a057e144db0fd6ddc56d99bea1d2e677ed28219aa28aec1d59d6d21859fb1468622e954b0ba9c3461d1a34a2cd3f982376584049cbd22c1215b1ac78831e3d9894b7b928cb4c5d0251a786c8e831264a9edd8e16165426126254be3319fb6d289465de538e6cb500a8df25b6f795fe504e1d383d41e596e2852cc9281499eb532f43f9e7be5b011072b6a752ff04e314e88b717612acbf1dd67114f90ef7db7ba5281e9e3c3f05fd22092d6ac07073ab9c26afed4558cee3da236364d7b5db5851561064f45cd80e", @typed={0xf9, 0x1, 0x0, 0x0, @binary="7df9d82cbdc5ea5718d4d444f09891cdd3f86492db0a28e0ad2786e78ce0c11a104bc3efce23ce8c78d47b78b0e3b2ab7b38036c990862a566a878497d1beb7416a82ba0a8222c95c1672dc4d3cbc1f6e614385f97a632d1ced5ea65ce67428b3b8ddc0d0204cc4b7e51546c7cc3ddeb1f6088647a81bfe9f9048de0d03dd2d45fd81b942f0a57e019866a893796d2e14dc3c004ff6f6a8e2a6d4ce2f41dccfb43f278b7a18cb07cc7327e9a80094469a549bc0cf16ceee0b8ea7edf53b5871aec02ad27a4135eb3edc3d5dce88002abffa31392cae3c5b49969e843ac4a68ae87ec4bac32e2bdd87b7599e01ed7a68e6a62d75dc6"}]}, 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x8040) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r3, &(0x7f00000007c0)={0x2, 0x0, @remote}, &(0x7f0000000800)=0x10) 04:23:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x38b203, 0x102) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x800, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3219.325326] loop1: detected capacity change from 0 to 40 [ 3219.340177] loop6: detected capacity change from 0 to 40 [ 3219.372219] syz-executor.4: attempt to access beyond end of device [ 3219.372219] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.373547] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3219.393265] loop7: detected capacity change from 0 to 40 [ 3219.401045] syz-executor.1: attempt to access beyond end of device [ 3219.401045] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.401986] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3219.412148] loop3: detected capacity change from 0 to 40 04:23:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/126, 0x7e}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 04:23:53 executing program 2: mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x124432, &(0x7f0000000400)={'trans=unix,', {[{@fscache}, {@loose}], [{@pcr={'pcr', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xc2+%\r^/{-:'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'net/tcp\x00'}}]}}) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = dup2(r0, r0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x200, 0x21) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="e7ffffff050000009c3d59a4af3549932b356176f7fd0e2e2f66696c653100"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) unlink(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendfile(r4, r2, 0x0, 0xfffffdef) 04:23:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3, r1], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x200000010, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r4) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3219.511307] loop4: detected capacity change from 0 to 40 [ 3219.535341] syz-executor.3: attempt to access beyond end of device [ 3219.535341] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.536203] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3219.558914] syz-executor.7: attempt to access beyond end of device [ 3219.558914] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.562188] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3219.567142] syz-executor.6: attempt to access beyond end of device [ 3219.567142] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.569286] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:23:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3219.591673] syz-executor.3: attempt to access beyond end of device [ 3219.591673] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.593825] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3219.603993] loop1: detected capacity change from 0 to 40 04:23:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6800, &(0x7f0000000a40)={[{@gid}]}) [ 3219.645883] syz-executor.6: attempt to access beyond end of device [ 3219.645883] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.647990] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3219.724210] loop0: detected capacity change from 0 to 40 [ 3219.729271] syz-executor.4: attempt to access beyond end of device [ 3219.729271] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.731213] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3219.739532] syz-executor.1: attempt to access beyond end of device [ 3219.739532] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.741467] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3219.842771] syz-executor.1: attempt to access beyond end of device [ 3219.842771] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3219.844593] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:23:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6c00, &(0x7f0000000a40)={[{@gid}]}) 04:23:53 executing program 3: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) unlink(&(0x7f0000000480)='./file2\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000090e3b98d18000000", @ANYRES32=r0, @ANYBLOB="0000004062800d40e53ac4696c653000"]) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x5, 0x6, 0x4, 0xe8, 0x0, 0x8, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x1900, 0x3ff, 0x4, 0x5, 0x4, 0x10001, 0x5, 0x0, 0x9, 0x0, 0x800}, r3, 0x10, r4, 0xf) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="2f646576bdf86b042f73673000"], &(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)='dax\x00', 0x0, &(0x7f0000000440)='){\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x3, 0x0, &(0x7f000000a880), 0x1000, &(0x7f000000a880)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="ce0d5bb72648821cf629fb7c0941b7e3dbeefb25e22adcd9c957c304bf73ec2a74b47a079b108c93f2c9656bed37862861bc6adba27f167bc0e77315f10efc5b4d5c8455d56972b69df5b50e5138503514b2caa7ac4a0633c028e933bffa7e7946c4018a263e83fb1c2651c873495d5e9b5be73907d29f731dd0bb0d07b4df2166a18fab953e18425dc31c9d32f06594f01c412cbc8b4c626ed83f3c387e77a53c352fa09d0497f63ef455d996fa7d69f629ffd28d902454866944ae0e16891ca6fa8d35335d8126f69e81bdb1f600319b1d"]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) chdir(&(0x7f000000a840)='./file2\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000003c0)={0x6d2, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f000000b980)=""/110, 0x6e}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) pwrite64(r4, &(0x7f000000a780)="18866c8de61c46f5774886f687a3e67599149117ab85e45d7d5d86570b12651f60c810d560d8f0ea76f30d721ac9e85ffb5bccabce9624164708302bd5c62c802eb6b8d92b7c6e", 0x47, 0x5) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) flock(r5, 0x6) readv(r3, &(0x7f0000000240)=[{&(0x7f000000a800)=""/18, 0x12}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000180)=""/47, 0x2f}], 0x3) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x200000, 0x141) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300), 0x2, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:23:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:23:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x800801, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="01ecffff0000000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3220.063062] loop1: detected capacity change from 0 to 40 [ 3220.112784] loop3: detected capacity change from 0 to 40 [ 3220.124274] loop6: detected capacity change from 0 to 40 [ 3220.133981] loop0: detected capacity change from 0 to 40 04:23:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7400, &(0x7f0000000a40)={[{@gid}]}) 04:23:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', 0x1, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x1e5082, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendfile(r3, r4, &(0x7f0000000300)=0x100, 0xaa97) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)={{0x107, 0xf3, 0x4, 0x248, 0x3a1, 0x0, 0x333, 0x7}, "3213849267e4eaeedb4ebcc224cf6de23ed9e9de63a84933754c954a88bbce6544fa1d89de28c9caee77f025fa92937cfc9e226cbe539be5bdf30a5669624710b9e3c6ff903c2b5bda4a1ca456d8174c67ac37420b4b14daa9ff673b729caae8cea8775dbc6ec91cbaf8703a229e26957cd43b98a718386603c4153ffb167628f756d2ddecfbb93ee597682ceda8643da726", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5b2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) renameat2(r2, &(0x7f0000000900)='./file0\x00', r1, &(0x7f0000000940)='./file1\x00', 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000980)) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3220.189377] loop4: detected capacity change from 0 to 40 04:23:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) io_submit(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x961, 0x5, &(0x7f0000000840)=[{&(0x7f0000000380)="91635b73165bb3874131e1dc0846fc1bf6e75f0a30d2a9684d82fc6c0ebd54fc839fae5fe62707bbef63039a9bf485970209915ce3d58cc0622905023d96da43eed374bfe8ec7e3b5e670ff5de8e1b74234bebfe30f853117f5a65ddf94742162bb7e817e1d70681c507a992c8fa5af30ab8566d75c6fe9c652eccafb218a3eaf7ad6906439d2576f78708c7f36511f8bcbe86e4b2aea532b543fa6691e23110278aa946acb798a5c2fc107ba3c16f23584f7adb9c8f6c29407d5dd25ae2b3c6ac18a553c13134d511619187ca", 0xcd, 0xffff}, {&(0x7f0000000480)="055f69a1478505489253a091cb8aab354156a0f54f9a24cd680ee2c7b9ac26b2f34afd904978ef36356810950d45cb72db1dd8dbce04bbf034c9685d3cb412a3942aaf1b9a6fd4bb1039689988d7892210bb4d47387205d110256ff946cb3d26594b09c4cb0e147e4f0c453b4ca06ff26283001295e3e4a79e18af8784b5eb48384dbcb85fc7a558c6030f92a4a7032b7e857e2e962ed945a3a4f294a7271854813cf64bcbb495c7403f7c19beb5ddf8e11a5852ad510b67f972d8ef500fa914a738dab36ec261d0d85d321ac3031b0b06b414ae0d6e00a514419e06379a7ae51eb8bdcf468d1a920e", 0xe9, 0xfffffffffffffc01}, {&(0x7f0000000580)="8784ed99867401e6fa1073d17d78b614733acf8fa552667d2fa7a9fae84fe0e12847cf777d8d0d2c89f34502309d053943801f3562bb3862fde0b039d2d89b1821baa1d836edda3a2dc96dc79d5fbed45d1fcb6417bd4078f0ef6a59dd6ca7dff2aa7b121d0739cd74bbd2d02b2b160c51b54fd8aa0154d1c8d6f7270ebe528702fa565922c03f8041573d2eacb7790c939f9482af75307c0afa9b119fcf797e9e95680ea173bdeb6e9dd479ac93cc077a9ba4eb2d422644a0f38d4e1f1070a0f9e667a91a5e42490d75a18a6ab844445e55ebe7e6aae8454caf39fb274f059fe9a94d507c44fca81e18f3fc6f1d850e7a8c06b6", 0xf4, 0x3f}, {&(0x7f0000000680)="67e3c066610e88748518bdcbbb5e4957d5f202c13736053d706cae4f005410f6f46f3e1c3b2e34a09e0f2504135a579f1a0423db8fd9b2a98db498d5cf9ffd9ad5600249bf23e1a5851387dcd87c3fa5fc191976f314838cfc9af3e0808a9ffb73712066e4ea2f4f400bd5496f7c535f3dd5482777b0c4a571a8cb98fe66081182", 0x81, 0x3ff}, {&(0x7f0000000740)="1c8a75fca91a58bce3d07be98c8f8ad1d48e8722af09c99054db975b85b779de8db8bf0d3fa6c97f95190d69241edbdc56734626f78a68e11340eca076fb53b1208a6c31b4a86b1a356b08fbe6f827a47e95aee493edeeb856d941399386ff596fca029a8133740cbefeb14ea51680548f4cc51b1f7af49bb4a4a8654c5ae7afd4a0ae366df3be5d2f8b1bf6d5c9b302317b8199562b712d44b012429dffb0485cff5ea968b82ece23acde9dfe0dfed029e8082e665e532fb3304a8f7ec7ea2bbacf704a851b52932f48d7d9b6efa9fa61706031b5cb79f0a09d638d9af88de294045352", 0xe4, 0x1000}], 0x18000, &(0x7f00000008c0)={[{@nonumtail}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x24}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x10000}}, {@euid_gt}]}) syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="cb470690c72b924d1f4df7ce7ebc46823e62d83d07dbee7c54e113d77b5b65da81bea587f277447ad8e8617a778467c4e2a38ad09a3eeed0541a19f68cac25a8ce2329575f46b6a4d21c336081d1ede3b68444fd605ccd0cae87922ea4cbc812b4438ee1a2494b29", 0x68, 0x7}]) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000240)='./file1\x00', 0x100) 04:23:54 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3220.514123] loop1: detected capacity change from 0 to 40 04:23:54 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7a00, &(0x7f0000000a40)={[{@gid}]}) [ 3220.536995] loop0: detected capacity change from 0 to 40 [ 3234.020730] loop3: detected capacity change from 0 to 40 04:24:07 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = accept4(r1, &(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @remote, @bcast, @rose, @null, @rose]}, &(0x7f0000000240)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000400)={0x0, @aes256, 0x0, @desc4}) openat(r0, &(0x7f00000003c0)='./file0\x00', 0x500, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) 04:24:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x100010, r2, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index=0xa, 0x4, &(0x7f0000000140)=[{&(0x7f0000000300)="0a99a4239317ee107ee4d97118c8947b9e93ebdfd52a8f854748f5cca15d047635ba139f3ff634eaa20b5fe29398b0ccb0d2e11cf9a5ec15f4d1f6cceaecc4f3a1ee5ddfb87ede120bef60b3b8497365178d3e1317862e9ae5ed1d6d4ebb250d6c37", 0x62}, {0xffffffffffffffff}], 0x2, 0xc, 0x1, {0x1}}, 0x7f) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xedc0, &(0x7f0000000a40)={[{@gid}]}) [ 3234.025356] loop6: detected capacity change from 0 to 40 [ 3234.041774] loop4: detected capacity change from 0 to 40 [ 3234.042574] loop1: detected capacity change from 0 to 40 04:24:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="60080101000440002000f80100"/23, 0x17}, {0x0, 0x0, 0x10002800}], 0x1884, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') flock(r0, 0x3) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000380)={0x0, "6d99c8ffd2338df7cab05c011e4fb66d"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x52, 0x9, 0x4, 0x9, 0x0, 0x1f, 0x280, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x2804, 0x964, 0x4, 0xb, 0x7ff, 0x11, 0xfffc, 0x0, 0x5, 0x0, 0x9e}, 0xffffffffffffffff, 0x7, r0, 0x8) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) mknod(&(0x7f0000000040)='./file1\x00', 0x2, 0x80000000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:07 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x90) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:24:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3234.049817] loop7: detected capacity change from 0 to 264192 04:24:07 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) linkat(r4, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3234.085831] loop0: detected capacity change from 0 to 40 [ 3234.179756] bio_check_eod: 7 callbacks suppressed [ 3234.179777] syz-executor.4: attempt to access beyond end of device [ 3234.179777] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3234.182908] buffer_io_error: 5 callbacks suppressed [ 3234.182930] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3234.190239] syz-executor.3: attempt to access beyond end of device [ 3234.190239] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3234.192107] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3234.263724] syz-executor.1: attempt to access beyond end of device [ 3234.263724] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3234.265859] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3234.321298] syz-executor.1: attempt to access beyond end of device [ 3234.321298] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3234.323210] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3234.332828] syz-executor.6: attempt to access beyond end of device [ 3234.332828] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3234.334696] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:24:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfeff, &(0x7f0000000a40)={[{@gid}]}) [ 3234.890329] loop7: detected capacity change from 0 to 264192 04:24:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x20000, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:26 executing program 3: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbeb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x3c}}, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:26 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3253.068771] loop3: detected capacity change from 0 to 40 [ 3253.073982] loop0: detected capacity change from 0 to 40 [ 3253.085002] FAT-fs (loop4): bogus number of reserved sectors [ 3253.086000] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3253.094219] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 3253.098318] loop1: detected capacity change from 0 to 40 [ 3253.100282] loop7: detected capacity change from 0 to 40 [ 3253.104559] loop6: detected capacity change from 0 to 40 04:24:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x14) sendmmsg$inet6(r3, &(0x7f0000005140)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0xffff7fff, @mcast1, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="186f1f517d9419123a4154b7a2f8a5010c7531de5bc77a4b21d67ea1b1e69f988e3f1eca2aae9f728b2798bde9a66e4fcc736d3808ad633c13b0440e9f6a4724edded68928b06a", 0x47}, {&(0x7f00000003c0)="a9b0766b5bddc826b9d98d775e0b1f328b95", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="4f4b699027f6b453a37e0ea3b0a533dc5c90777d2a0b283bf5344aa3ca99f4edf838d059134cab6c25825891b74dff0325e3148adf3d6a8f635e98883839046f7242d1c192869557e13ca40647ea573b2d7331f82d3d54916e44995251015d3bb98cf82e769f6fedaf101b7e2eceda8b9aa7af0ba6a96b1adee86438eca6bb5a09f236ee72ed9bccbb6ad920f471d386043ff292e3219e69f74d15eebe75371013906601188f8ccc8aa340cd11c920376424b625acc691d42a3e98eb6e0c42508bc0de91d656b1bf4f04c17a0c75268d7abc509908", 0xd5}, {&(0x7f0000000540)="65dcd12598d0d6ecc90d7301831f2cfc527d003d1d9f909eed0240e5049e4d381c742952df1f60d20c455aa74d65617ab453b0fb706b2563e2a7", 0x3a}, {&(0x7f0000000580)="0d88175c07fe43b1ec5e5763fc14b49b55abb8296e1e478053c28508d16e47274c73a3076868cdebcde652c26abf662852b89ca3a1068f42e02ef3dcbae675d217d1c7bc7e75c993ca7a6c5e1b9fa5338862015f79413989a669e08649191fe63c440a94de5ae0b49019a74513eb63f3", 0x70}], 0x3, &(0x7f0000000640)=[@flowinfo={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x71, 0x6, 0x2, 0x80, 0x0, [@mcast2, @private0, @private2]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo, @calipso={0x7, 0x10, {0x2, 0x2, 0xfb, 0x80, [0x4000000000000000]}}, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x1f}, @pad1, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000740)="1c522046f304da14192b5e55513e2dd3c0a5c923e3022c9af34989af89ef8e904631aa98a6460003754e0f245a975f115f50c84c9aba5894b542345f294caeb93cd6c73af6231973c445961187bfe039c9ca855ade4e3c3efa2fc0c8b57e3e464b0e6b876a7545cb22256ec6a7d7fdd699c9b15cc35735a91d0bd27d94611856a22c", 0x82}, {&(0x7f0000000800)="698cec70112db4943e8b5a9ecba15e7115930bad36ee88cf8279bea1a3c04cd7c65ae351c2173e67a9a1fdce0717d1baa3d396cafcecb2179f7082851ff967a4ae99db12fede2882edd94b0b650211da834eb77574059f0d44d23985d1a54dcd188dec07a98d4542aee529e8feccb0ebd2142a131d6fb99bfc019572b6aabe02f2dec2fe8d1175c42306d2a8c919b11a1e4272ff8837a1a5dcff0c6496fc7ae23307ed15ffbeaf3c", 0xa8}, {&(0x7f00000008c0)="2a4e7060d20b22d1280e1fe61124a4d313e270f448ec3858d1d3e2c5fd174eee9e41741472129842c5a365f6e393053ae11630e6d592a1ec396a9ae52c9725fd64bb1bf49ec77c440fd312cd1e0bd3118b341f5d14edc653f09d5e95039c33879eca79df35b0d1f5ba5bdf130656a94ac0c71d5afb15b79a9aef161c7cac3c603374bb92139344d0ade58d91abc6c540a202907ad2191d15cf54a256939ee989a26c5c3d71398cf3bcc78ff7d0c801c5afff47b5464da74d6cf9d415d6fa24e4733c518a6b0c630819eed409730e84c0036527013fe84abe1668fa569d2654", 0xdf}, {&(0x7f00000009c0)="6ea947c287afd24d8563a86023c52b4e89bd166d5bcad1e33b7281a8745ec41696599df61abc0987bc68567359c88a3cd14a27e83081ccaa990857409543ee4418d830ca1eb49f2760a0a7189a6b41be8768194c26b26d24f8b7341167c5e0ab3a14e9022d9435c31a24", 0x6a}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="1c9b494a52054731e52b969284b8baa96f55de311b6e38062b7c74766bf5b73424aba67d866c", 0x26}, {&(0x7f0000001a80)="92c9c689695ec9e099daaeb4bd1128aeb39f79cf31a38bc988489752282c74b55e5f8464887b82776df040af6157319403c497762e6dd6ffcb586854c12c66501cbd938135d39efbcac590eb8e20179bd91e2c233b669f4478b6bc4a3c979aaa792ba412bac096fd5c2f9e98b8f2e5b17ee286e784be8b5fbd88f1092425e3323799982575366caff7817011851e7ccee8f92b6592407075e19b065a4f4a7b3c69f14091edd7fdb9c6809127c5e51bff7fc96de706352d0d0c571c694aa4d22efe677803115e0fc5849452ccf1a8d484b778", 0xd2}, {&(0x7f0000001b80)="91fa4f33127c62ac9f62ff07b2fdc44fbd3bec367a8cc4f71c5877f6eb2d1beca0e3ba323425fc18de8f3d8df44b35189c0343f8b3ec1528c5c5c178c181a7a267", 0x41}], 0x8, &(0x7f0000001c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x74d34202}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0xe508}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001d00)="2b13df12159d9f185e20c0660f6a1fc94408985f8fcb738f278736e6ffcc6655c7b097ca584129880881a0bfe0d56f5cccdfe3a19a705002f7f4b54e8f664533144deac96e46f0830870a9550002c35ba6964a2a557df50cf973cd5a3c0b1aa2732deeafc4f048a97fff02052253e9cbeed0fbec51934446b94a0b7a75cc4a770b86b24db84161548ca22700534823b5dfe2", 0x92}, {&(0x7f0000001dc0)="9069989da5333a1dc79cbdd2ed291d48b6b74282e9010c94452016fca99d22a2ecda4787c3bbaedd65b168230fb6", 0x2e}, {&(0x7f0000001e00)="ee9960d4809ab889701fd1d4f8d6f83fb2589c915f5f0a26db425a534bfe3113b799c7cfd2b2d91eeb8fdaff8aa376d64d60bcc5d3342510e770886b62ebb657c41af1a713c26a4540460063190b8e89130b0d1555e512b6e8a6359ab46bf25891fcf885511680da7a1a12d8d9457df7baf8b9ab0d6947296dc185f9539900faf5b48a73772cbb80a6f4946b7f7ecc32de67b27647a820596a171dd2fc9b4713117642cc11c924019b063094458a88e31c6be4e69e467ed80f3408856aa6657c3857007ae109d6a46be230fe6c63cc9bc849d84b2e86bddc3a2dd905c5cde8c8288f0ed411e3329e38ae42f069f806", 0xef}, {&(0x7f0000001f00)="d4c35976ed304c7b664625da8b932c6b345fc075755df7d92d082bb550", 0x1d}, {&(0x7f0000001f40)="a095028da60fa5d96a76a627d55fb7b569faa024e49f78a8330327d0b5aa5919da58c921e6ec9a4e3c7a618aab29d411af7901bf6a9f9cac67a4c3dae1a185e006928bcdf49e6a3c5edff2579882d54823a91998ddc5a3fdcffa5f75e3b3da389f600175145e85fd9f796745302006b0a5d134d40766ab90f28b8314cb9634e21edc87de3be713d108747d941b6c4a3c8873dd56134022af20b5328c66baa238fe78b311958a5763b7c85e9dcbb16b24ed84a57e1bee34dc13eb270516b57e304cb5c8716f1bd87f301ac7daaabd1ed1ba82a02e8880", 0xd6}, {&(0x7f0000002040)="242f1b4bddd42202db2e4eee4d41abdc319f2ee84eeb611cd6c97cc9d7fc3a4c6133766ed0dae6b540d93642bfd5035fe056e3f7b2a5e879c79655d6cac584bc0627d4b73ff7555b9d35beec815c4a955d2170866decdc03db645e67070296f7d99c037685705bd56b28df251c08bfbc1e754bc9d03be6b4862c445664be3c1157b5ea964adb71da820923bfb908fe511af991899b4da1077112db93ffee5ffc2a1dde1c7d80c37679055ae4efd733fb5576396c90b1268a329ef2237b2d1335227f0b", 0xc3}], 0x6, &(0x7f00000021c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}, {{&(0x7f0000002200)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000002240)="afbad5668528000b6a09a3c3e284f1150f6debaf99940c8924d147012ac087f39855b3c0bf772f5c5416ef14a4534f8a53723f21bb281105bacf48ba1d4754d90b04c0b60798f2a627da609649afdaada20502cb44237ec0fb7d33a74e533110f79f8a82d3109ce0ce05296d80685d242f9f3bff5627b2688ac19f5d52528fb38368dd1db32797a3", 0x88}], 0x1, &(0x7f0000002340)=[@dontfrag={{0x14, 0x29, 0x3e, 0x732}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x62, 0xa, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x0, [0x3, 0x1, 0x101, 0x8, 0xd924]}}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x88, 0xb, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x100, [0x5]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x1, 0xb, "e64d2631d194538fa3253a"}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x16, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x87, 0x8, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x9, [0x7ff, 0x7fffffff, 0x5, 0x1, 0x2]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@pad1, @pad1]}}}, @dstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@pad1]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x1}}}], 0x1f8}}, {{&(0x7f0000002540)={0xa, 0x4e24, 0xffffffff, @remote, 0x101}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002580)="22e8701c28beb7045e30fb01cbc4450476622b4e774c639b65575e8c0140585d4d0af92816d8243ee55a56f74fcbc9e3a8120f626a64521e0a8f35eebdae4ad04c3ad39f266037c70d9b5aa381d00b6f0182f3bb7c5fadc9fc5eb3e42a8714f7bb93e7e06f5b78bb841dc59998181d3a617461e479af188a9c14653ae701ec8d2b0b321ee86c52a31fd7104b84102a9b497a540d84a3faa242", 0x99}, {&(0x7f0000002640)="e5438a857510bc2ab97a793773adf9ceda201883ba5eb278056dd9b72b945eca6cbfa57c8331cd7a4387f2e585ac0bfa09110f2d8d023f44306d1261b6b02df63590ae85d2a986c81f4ce93d2e43a6d1ff1823205a41498b74be42c8f2653dfb95b80b7d03eb2a159a48ccc9620a97b79ebfbef6ef4a9bd9a6e95e1457b1bfaf8434a162b89ef9ce3f1c07f97c02947c8137083f3114a61fd0f254db52b8ae5236787d8162345d5d63afd0cdc5f8526d50f8b0c3bafb75b6534e59095b076387f0ab", 0xc2}, {&(0x7f0000002740)="ca89e44aac9c26026c583480695fd327146ed95027148ebb17ae5452240b45b3790354", 0x23}, {&(0x7f0000002780)="8400d2c915349c5495d82fe3f14e3f67116ac26a8159c9f4ce728876f144d49afe71372e34db8788e300c6cff1184360a4d99118feb6f20281c76f5f093eb1b2fe0f6995086d25ca8bc9a9629f0e9617950ac08ab1e8144caeed14dcbd6ed8c1009bf0e6b6ab54819642f1f8f79f93dc1244e60d59fed238edc54922e51d2abf169fc939a7ed517cc51b21da9b186b292585d1c03687aa9099232ec038a34d82c7ed73db4b9d53feb2f6da966b58e501", 0xb0}, {&(0x7f0000002840)="5fa79dd54e270afc8de62df09667e73d56c8d430a8580e98ff9f00bf917307586772f04792d2ac2b179d740b52b83956082e4c36af21cc4e180130ae48017d61f85a74d9c6addd203d84b27565f9e9110ffd1f1c08b457c2dc6eb8af33ba1335c186c47f6ca0cfabcf0a52850675adc466eb526438f5506544f350f29d975d241c58bbf07f4476e8a73e4d91ffe4c29f2bb117d32c63f62853d9b9563c4e12", 0x9f}, {&(0x7f0000002900)="0a59b2f696fcc74b0c603a366c1b0b0fc212b0962842226160687a03db7cb2ccf935d9f7a6fe1bb17219ca4fc03eb5e8791655f34b78c12753f6e2eaabfd93a66792cefff6e89c1d230a51afd190ccc94897d81d9c6273f0a5b6af38771b6910db4bd9d15b7ca2b5b7422330de6c705ebfc0f6a869538801a570b988cc", 0x7d}, {&(0x7f0000002980)="81e0adab4438ae9ae7cd89f37d9e100531ae3d811c4704be87d320a969f8058c62ee9967c0c51d581e37a8c40312de7a927c18f7c1833f0d770750b8b2986445769d9d6ae8b420401d897cf8b266a2117f7442279b44612358ab8e627d114c5696fdce5cc0da498fa0ed18a003b6589dc21ac4a658e4c2f8666120bafc70f37dd62318e0ddfa7db0ee69da3c21db8bd8195eee8a267aed168a7472a4f9d69c65d8b6e0221e9f336635fb67ec3b0ab08e548219dabd75f034f5d2bda3e0d93d6bda7b981d62ab8200d906f4f253410500cb311d97a95988abb43aa05c6f5c42b4de9545c631781fe1c967b74a", 0xec}], 0x7, &(0x7f0000002b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x6a94945565f8c3e8, 0x1, 0x0, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x60}}, {{&(0x7f0000002b80)={0xa, 0x4e24, 0x0, @mcast2, 0x1}, 0x1c, &(0x7f0000003dc0)=[{&(0x7f0000002bc0)="a80c099a0e1d4543a2e061a08f415631763e20d26e6362ba7b50e0a423f34f6a6dfe0d6e37f5096038751ef6ac02e85420ffaefc835119d892581147ee52b3e2d62eab64c8b88540988d461e9aabd8dc7a3ee8ee9602fc10cd7688c8a2c79669746ecc5a09cc0b6d1399dfd770a3ba68365f2123ee72e2624f5786ffbd36f584", 0x80}, {&(0x7f0000002c40)="ea20685fc2eeca11ac318863928459d392c51157636c7fd3c68fc265b43ec5f4b67f430b8a553f07df8e45b6853b5615550667f7be105a7d27b39471a5950cef700c777a6b04c68e2b6e0853da804a446a92c7db2aca4a3f54881add05e65b13e315a6ccd3408587ebf934b4b28d9b0f4f3356e5ad34b80cfd9cb26a3cf7d157c0c39f91071d2f89dfe3c223cd255ebc42", 0x91}, {&(0x7f0000002d00)="551feeb932fc0be40ce8b86150b0dbd4c1793c46890d767b5110deb8953b5c2ef5e11823ca3ae5b0823bed89a27a22611f094195926436577169a94f55cdc0be12a28626aede60c931fbb2e6acf2a9e076a34a8f808a2607a3e07bbe840da13050e3b0374abf25c3fa85c0dc1ad65415f4e1c49aae9b029818ddeb2bf36731b4b658eb986e6c0b", 0x87}, {&(0x7f0000002dc0)="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", 0x1000}], 0x4, &(0x7f0000003e00)=ANY=[@ANYBLOB="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"], 0x1200}}, {{&(0x7f0000005000)={0xa, 0x4e23, 0xfffffff7, @loopback, 0x7}, 0x1c, &(0x7f0000005100)=[{&(0x7f0000005040)="b4158c66be1ef89d4512933b072cfe466ed078970824379299194395462a98a03a95e9e3f6d0e08992b896ffc32f8b744e84052dd00dabf280e62bf89b8820b76f20", 0x42}, {&(0x7f00000050c0)="27a55c4b05516fcdeff55d9d05bbd4fe5fe3d4186ab9a2511da39437821063b9", 0x20}], 0x2}}], 0x8, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB='n/file0\x00']) fchownat(r2, &(0x7f0000000200)='./file2\x00', r3, r4, 0x400) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3f, 0x8, 0x8, 0x3, 0x0, 0xfffffffffffffff8, 0x410, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0xffff, 0x2}, 0x4000, 0x6, 0x1, 0x3, 0x9, 0x3, 0x200, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 04:24:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffe, &(0x7f0000000a40)={[{@gid}]}) 04:24:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') syz_io_uring_setup(0xfb0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x81266b6, 0x0, 0x0, 0x18}, 0x0) syz_io_uring_setup(0x39e6, &(0x7f0000000440)={0x0, 0x7586, 0x0, 0x0, 0x149}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000240), &(0x7f00000004c0)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0xe7ec, 0x0, 0x1, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(r0, r3, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r8) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r7, r6, 0x0, 0xfffffdef) r9 = syz_io_uring_complete(0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x0, 0x5d, &(0x7f0000000300)="18b11a50edf40368cac71cf720058110e599d44d85a45de49c1f324f4483d787b25552f000fc7b8609080fdbf3417aba55649f166ec651b50019b2acca09f1a2b60b972f3f19c958eaa3533d2ea8099f110df26941baee0aa720d6d4b2", 0x1, 0x1}, {0x538d, 0xaf, &(0x7f0000000380)="dd971abeeaf36910ea83d2c8b054861494b203c0093730545e1412132ae5c8f9681a79bb54d46bbfd5286a6659db720ca9c47eb9c5629b0c117a5ca1eff584cefd9c7f47a09b201a881d440e118a09886d5de388bef3675718919cbdbb286bf956a6c4c325be08a48bbf2200d44fe3cd7a66f9217d0faf540b4be6c8c597561ca180ca4de95d6e2ec941af7c50bc7bcd696fc47e5eb5f0b0bf741d0455b42a772633f2470c94e7d0803100c0b22917", 0x1}]}) 04:24:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x80000, &(0x7f0000000a40)={[{@gid}]}) [ 3253.319593] syz-executor.6: attempt to access beyond end of device [ 3253.319593] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3253.321521] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3253.349815] syz-executor.7: attempt to access beyond end of device [ 3253.349815] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3253.352726] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:24:27 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3253.422204] syz-executor.1: attempt to access beyond end of device [ 3253.422204] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3253.424391] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3253.485524] syz-executor.1: attempt to access beyond end of device [ 3253.485524] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3253.487318] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:24:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) r3 = syz_open_procfs(r2, 0x0) fdatasync(r3) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3253.605042] loop0: detected capacity change from 0 to 40 04:24:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1fffff, &(0x7f0000000a40)={[{@gid}]}) [ 3253.653898] loop1: detected capacity change from 0 to 40 04:24:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0xb00, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) execve(&(0x7f0000000340)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000380)='/dev/zero\x00', &(0x7f0000000400)='/dev/zero\x00', &(0x7f0000000440)=']-(%\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='{-%&\x00']) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0xc2900, 0x0) write$P9_RREADDIR(r3, &(0x7f00000003c0)={0x2a, 0x29, 0x1, {0x0, [{{0x0, 0x1}, 0xffffffff, 0x7, 0x7, './file1'}]}}, 0x2a) 04:24:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) creat(&(0x7f00000000c0)='./file1\x00', 0x8a) chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8c520, 0x120) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) [ 3253.870731] loop7: detected capacity change from 0 to 40 [ 3253.885878] loop6: detected capacity change from 0 to 40 04:24:27 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3253.961026] FAT-fs (loop4): Unrecognized mount option "net/tcp" or missing value [ 3253.996010] loop3: detected capacity change from 0 to 40 [ 3254.014108] syz-executor.1: attempt to access beyond end of device [ 3254.014108] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.016079] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:24:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000000, &(0x7f0000000a40)={[{@gid}]}) [ 3254.065118] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 3254.151978] loop0: detected capacity change from 0 to 40 [ 3254.154073] syz-executor.6: attempt to access beyond end of device [ 3254.154073] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.156992] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:24:28 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x2000000, &(0x7f0000000a40)={[{@gid}]}) 04:24:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r2, &(0x7f0000000140)='\\-{}&!*\xb0]\x00', 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x100000001, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000300)="b0fe2495ce91a221448a4bf67372eaf86ff5a7949c09e2f693a4fe3ea1bc5ccd373ff5b232963ac223a82d2d248d52b47369754c02cc8a07480d18d7e257794546a8e85636cf117de2fa1cacda5c73fcc48ac53e9171714a69ee", 0x5a, 0x5}, {&(0x7f0000000380)="6bc286b91aa5d2b57308857f3f32c2773c11916dc8d49be84b5dc51d4f664626948ce5f844799bc70890a33b48623395ba0c1924cd78f6e41006c85dbc13fe78efe6745d625a7a26275931d2cd63597db08316b1f36a0ed143feb607dbbd740993aa311ae50d6ddcede1f99ca1", 0x6d, 0x5}, {&(0x7f0000000180)="01fe25215c7e54ba171f2d955475498121a0e3bede23066811eb1299d9d5e7861e1cee316777e2b9cee2b53e3bd4f615f6", 0x31, 0x3804}, {&(0x7f0000000400)="8806491da8b3003978e912b97208064ccf9d59be1a58872f0d04256aebb63d6998adb66fcb40f7eea1229090d7940eec4370bfa2a4620e2d8acadeb239d99ddbd9127ae848de83cb3f9d3d20e67cdd759a919ab10e71657b4eb2971547bbb484a0195f5bb255422f8a3a7c6268b0e9372b38bcd18ff7af155706fa27c22d817bdab8094e04b2b3a9b8f860fc956b6a46f38e9a988176410816c4ef26ca8bc05617a9fbb5215d7cf8d1c08f7904de69eafe4faa0bbfa9bc9d0f84254c1ab0f922d54033651d5c", 0xc6, 0x82}, {&(0x7f0000000240)="5ecba580d981d37e56b15916522e86c8e47c19", 0x13, 0x4}, {&(0x7f0000000500)="ad215bb82ad9be95bac5214887f75eeaa4f6f38729f621c57b1b03f88eb3f9a4cda469cfa21a2d4ed4021c7662b8eefcaf2f22c5569ee910df69b4b0b0c7ea28968187df63828f22ad4ae1e09b74fa7d482d0c0ed307e78a3910d76fa0e69e5ca099cb9a948a9cff6ee10b8b69230e163511af0adfebd21d2f2ea49305040a798d54537115f3f379534bf5957478ea5cb85e09b41c2352ac773b895b9740bc2d2fe852a007732a6431efd8608295adc565d2bc709230f50b32200c09cbe0305da2a114a1b7f92c189d62155bf412f0005640ceabc655a5fb90bc73e05b9207fbd5a275b360d7", 0xe6, 0x1}, {&(0x7f0000000600)="23f22d685e11a1037ccd6ae5c94d5277b88f5d7ab7d3662dffb7cbf177271a7c70eb491880eebf12a78941ab6bb98b56593b5ca1acd2b1fb3289ccf7960111666ba1da9d6a463acab4c42ba105031a9b84146d506a4641f3ebf35f5a608a55936fa50d2eff9373f1fd5c64093368fdceccdc726002fbeec31243bc804f076ef601650955f03cd0f65a12a2488c89bf8ba39bf729ef83b8112bbb7076ee48fc1b34120f9ff73f0aaf7f8ca130c217358d631a0ded49369ec308", 0xb9, 0x3}], 0x11, &(0x7f0000000780)={[{'$]#'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'-^%[\\--]}\xde'}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, ')!#'}}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x64, 0x37, 0x37, 0x6e, 0x36, 0x34], 0x2d, [0x36, 0x38, 0x33, 0x66], 0x2d, [0x64, 0x39, 0x36, 0x65], 0x2d, [0x39, 0x34, 0x39, 0x66], 0x2d, [0x0, 0x61, 0x63, 0x34, 0x35, 0x33, 0x66, 0x66]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '*.'}}]}) openat(r1, &(0x7f0000000840)='./file0\x00', 0x309701, 0x81) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900), 0x48a, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@noextend}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x35, 0x61, 0x54, 0x33, 0x38, 0x39], 0x2d, [0x62, 0x66, 0x39, 0x38], 0x2d, [0x62, 0x36, 0x0, 0x64], 0x2d, [0x30, 0x34, 0x35, 0x64], 0x2d, [0x38, 0x31, 0x64, 0x30, 0x63, 0x63, 0x32, 0x37]}}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@obj_type={'obj_type', 0x3d, ']-'}}, {@smackfsroot={'smackfsroot', 0x3d, '}{['}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'subj_type'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, 'smackfsroot'}}]}}) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000880)) sendfile(r3, r2, 0x0, 0xfffffdef) 04:24:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) listen(0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = timerfd_create(0x1, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x76958569c90f8b9a}, {r4, 0x3110}, {r5, 0x3040}, {r0, 0x80}, {r4, 0x40}, {r6, 0x109}, {r7, 0x1401}, {r8, 0x1}], 0x8, &(0x7f0000000240)={r9, r10+10000000}, &(0x7f0000000300)={[0x7]}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:24:28 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:24:28 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3000000, &(0x7f0000000a40)={[{@gid}]}) [ 3254.473909] loop1: detected capacity change from 0 to 40 04:24:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) 04:24:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40880) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file1\x00', 0x10000000) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000140)=0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3254.522907] loop0: detected capacity change from 0 to 40 [ 3254.539751] loop3: detected capacity change from 0 to 40 [ 3254.578860] loop6: detected capacity change from 0 to 40 [ 3254.618279] loop4: detected capacity change from 0 to 40 [ 3254.619534] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3254.624125] syz-executor.3: attempt to access beyond end of device [ 3254.624125] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.625649] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3254.655870] syz-executor.3: attempt to access beyond end of device [ 3254.655870] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.657152] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:24:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:28 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:24:28 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4000000, &(0x7f0000000a40)={[{@gid}]}) [ 3254.795225] syz-executor.1: attempt to access beyond end of device [ 3254.795225] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.796812] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3254.823703] syz-executor.6: attempt to access beyond end of device [ 3254.823703] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3254.825752] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3254.826369] loop3: detected capacity change from 0 to 40 [ 3254.860732] loop0: detected capacity change from 0 to 40 [ 3254.870617] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 04:24:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3271.458344] loop6: detected capacity change from 0 to 40 [ 3271.461516] loop1: detected capacity change from 0 to 40 [ 3271.465010] loop0: detected capacity change from 0 to 40 [ 3271.476109] loop4: detected capacity change from 0 to 40 [ 3271.501977] loop7: detected capacity change from 0 to 40 04:24:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x5000000, &(0x7f0000000a40)={[{@gid}]}) 04:24:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0x120, 0x80, 0x12345}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r2, &(0x7f0000000100)='./file1\x00', 0x131c02, 0x118) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0xe7ec, 0x0, 0x1, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002580)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002540)={&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/62, 0x3e}], 0x3, &(0x7f0000002480)=""/148, 0x94}, 0x0, 0x12002, 0x1, {0x3, r5}}, 0x971) memfd_secret(0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:24:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x2, 0x165, 0x400, 0x9}) 04:24:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:24:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:24:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000140)=0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:24:45 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181202, 0x96) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000300)={0x1, 0xff77}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001300)=""/115, 0x73}, {&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000001380)=""/4094, 0xffe}], 0x3, 0x0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r5 = dup(r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000340)={r3, 0x1, r0, 0x7}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x36, 0x92, 0x4, 0xfa, 0x0, 0x1, 0x7980, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x200}, 0x51009, 0x7, 0x1, 0x2, 0x10001, 0x1, 0x7fff, 0x0, 0x6, 0x0, 0x6}, r4, 0x0, r6, 0xb) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3271.543512] loop3: detected capacity change from 0 to 40 04:24:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6000000, &(0x7f0000000a40)={[{@gid}]}) 04:24:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3271.727164] loop0: detected capacity change from 0 to 40 04:24:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x2}, 0x15582, 0x7, 0x7fffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r2, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3271.774204] bio_check_eod: 4 callbacks suppressed [ 3271.774227] syz-executor.3: attempt to access beyond end of device [ 3271.774227] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3271.777316] buffer_io_error: 4 callbacks suppressed [ 3271.777332] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:24:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) creat(&(0x7f00000000c0)='./file1\x00', 0x8a) chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8c520, 0x120) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) [ 3271.872617] syz-executor.3: attempt to access beyond end of device [ 3271.872617] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3271.874392] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3271.892764] loop4: detected capacity change from 0 to 40 [ 3271.895887] loop6: detected capacity change from 0 to 40 04:24:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3272.006075] loop0: detected capacity change from 0 to 40 [ 3272.106322] syz-executor.4: attempt to access beyond end of device [ 3272.106322] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3272.108337] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:25:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x2, 0x165, 0x400, 0x9}) 04:25:00 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(r0, &(0x7f0000000540)='.\x00', 0x4000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x7f, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000300)="faf468e1d86dee68c2f48619eb442e8f90a338cbee6858b80be653f5beb9a2ced646d85309d7bd544635b8f93a5d1f8cb34509a551f80a1d428a64182ae7c5d03b90f7c0623401bc0b30a95eec1067cda28de08fffc16be60a5c4b9aea6a648034568e85d785c5b38ad45bc937551e1c2fc8708882c0cf48600248ebf523a6134be7d1a2e3e5aa155344d4a145ae7c940cc80c2aa2dbccef06d548e0d9e95f13e01b931a7669477ed6cfd8b3a91623e4be45fdf458a48960b32957cf0b366e9e581b285aae749fd3186cd0d64906000000de00"/220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x1000) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x600100, 0xfa, 0x2}, 0x18) write$hidraw(r5, &(0x7f0000000400)="474d8691706c5570e8b8dd52a8457ee0473cd33a3b41049a54de6ad0dcb15ae09fdbe45d430ae90c9d41bcc8ad2f3199cd56279b4bd9a1d7d1eaecd49910c7c241f386bebde8fd89ddff733aa8902701bba45c0a48adbe39cb6ae9848bcbc4828a291f5fe2f1d5f1ecf3412dd1ffbe3e090175b418a41367b65321ed5857f74345cdc79b185ac6c8838183e84c2cea70d0bed9bd72ed31ff87c72953c0938c33d358eb0ab9b64a7946e7c2508aced85cf2401674f3e78d72ae90c86d4b3cb1", 0xbf) 04:25:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000300)={{0x1, 0x2, 0x3, 0x80, 0x4, 0xff}, 0x395, [0x7, 0xfffffe01, 0x5e35293a, 0x9, 0x7ff, 0x7, 0x0, 0x7fffffff, 0x3000, 0x3, 0x101, 0x1, 0x80000000, 0x8000, 0x2, 0xffffffff, 0x9, 0x9, 0xfff, 0x6f4f, 0x7, 0x3, 0x81, 0x2, 0x0, 0x8, 0x20, 0xe0, 0x3, 0x3ff, 0x8, 0xfff, 0x1, 0x1000, 0x3, 0x0, 0x8, 0x1f, 0x0, 0x7, 0x0, 0x993, 0xcd, 0x8, 0x6, 0x2, 0x400, 0x400, 0xc0000000, 0x9094, 0xc2, 0x100, 0xced, 0x3ff, 0x8, 0x80000001, 0xe5e, 0x80000000, 0x5, 0xfffffe00, 0x8, 0x20, 0xe30, 0x8, 0x4, 0x3f, 0x4, 0x4, 0x5, 0x2, 0x1, 0x7fffffff, 0x8000, 0x3, 0x29a9, 0x5, 0x24, 0x101, 0x1, 0x0, 0x8, 0x4, 0x5, 0x3, 0x6, 0x400, 0xf8000000, 0x56a00, 0x7ff, 0xfffffffb, 0x81, 0x80000000, 0x7, 0x8, 0x3ff, 0x0, 0xfffffffb, 0x5d, 0x1, 0x5, 0x7f, 0x8, 0x9, 0x3, 0x4, 0x7, 0x3, 0x0, 0x5, 0x4, 0xd4ff, 0x3, 0x5, 0x3, 0x8, 0x8, 0x5, 0x101, 0x6, 0x1, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x7, 0x5, 0x6, 0x2be, 0x2, 0x20, 0x4, 0x7, 0x3c40, 0x80, 0x8, 0x80000000, 0x8, 0x8000, 0x2, 0x9, 0x7f2a, 0x4, 0x50, 0x9, 0x5, 0x9, 0x0, 0x8510, 0x8000, 0xffff63a6, 0x6, 0x1, 0x1fc, 0x8001, 0x80, 0xfffffffb, 0x9, 0x0, 0x28, 0x401, 0x8, 0xffffff81, 0xfffffffc, 0x1, 0x1f, 0x7ff, 0x8, 0x5, 0x585, 0xe6, 0x5, 0x401, 0x31, 0x9, 0x8001, 0x80000001, 0x7, 0x1000, 0x5, 0x9, 0x4d, 0x6, 0x6, 0x8, 0x401, 0x9, 0x57ac, 0x40, 0x0, 0x267b, 0x8, 0x3, 0x8a8, 0xfc7, 0x401, 0x6, 0x8, 0x1, 0xfffffff7, 0x1, 0xfa27, 0x5, 0x1, 0x1, 0x9f7d, 0x100, 0x5, 0x3, 0x9, 0x6, 0x1000, 0x5, 0x7, 0x7fff, 0x1, 0x3, 0x482, 0x8, 0xac3, 0x36f7, 0x0, 0x1, 0x400, 0x2, 0x2, 0x8, 0xa6b, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800, 0x4, 0x400, 0xffffffff, 0xfffffff7, 0x9, 0x101, 0x1, 0x7, 0x0, 0x40, 0x6, 0x6, 0x1f, 0xfffeffff, 0x973, 0x9, 0x8, 0x5, 0x7fffffff, 0x7, 0x5, 0x5, 0xfff, 0x2ddd7efc, 0xffffffc0, 0x8, 0x7, 0xed01, 0x5, 0x8, 0xff, 0x6, 0x989, 0x5, 0x200, 0x10000, 0x4, 0x8, 0xffff, 0xb8, 0x9, 0x7, 0x7, 0x9, 0xc5fc, 0x1, 0x0, 0x3, 0x3ff, 0x4, 0xffff, 0x9, 0x7, 0xc9, 0x0, 0x1, 0x7f, 0x8743, 0x7fffffff, 0xff, 0xfff, 0x9, 0x4, 0x0, 0x80000000, 0x3, 0x7, 0x400, 0x7, 0x80000001, 0x71d, 0xee2f, 0x6, 0x7a, 0x64, 0x8, 0xffffffa1, 0x1ff, 0x6, 0x4, 0x1, 0x7, 0x0, 0x20, 0x490, 0x6, 0x9, 0x2, 0x4, 0x1, 0x7ffd, 0x80000001, 0x7fffffff, 0x3f, 0x7fffffff, 0xef22, 0x7f, 0x1000, 0x7, 0x5, 0x62db, 0x101, 0x7, 0x101, 0x0, 0xffffffff, 0x10001, 0xffffffff, 0x2, 0x10001, 0x70000, 0x2, 0x4e39, 0x9, 0xe614, 0x400, 0x3ff, 0x1, 0x0, 0x293, 0xffffffff, 0x3, 0x4, 0x2, 0x3, 0x8, 0x3, 0x8, 0x20, 0x5, 0x7b4d35a7, 0x7fff, 0xa0, 0x10000, 0x7f, 0x4, 0x2, 0x4, 0x75d00000, 0x401, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x80, 0x7e36e703, 0x3, 0x8000, 0x7fff, 0x6, 0x689b, 0xe723, 0x3, 0x2, 0x1ff, 0x1f, 0x3, 0x101, 0x4, 0xffff, 0x9b, 0x400, 0x6, 0x401, 0x1000, 0x200, 0x100, 0xe0dc909, 0xbcb2, 0xfffffffa, 0x5, 0x7, 0x8000, 0x0, 0x9, 0x6, 0x781dc2fb, 0x1e, 0xce, 0xaa, 0x9, 0x1, 0x2, 0x81, 0x6, 0xffffffff, 0x5, 0x2, 0x800, 0x8, 0x100, 0x7, 0x80000001, 0x2, 0x5996, 0x6c6, 0x4, 0x5f, 0xca000000, 0x8, 0x1, 0x1f, 0x5, 0x0, 0x9, 0x8, 0x40, 0x7, 0x8, 0x1, 0x7ff, 0x1, 0x0, 0xda, 0x0, 0x9, 0x4, 0x80, 0xffffffad, 0x1, 0x3, 0x4d4, 0x3, 0x0, 0xc425, 0x7, 0x9, 0xfff, 0x0, 0x6, 0x5, 0x3, 0xff, 0x8, 0x81, 0x8, 0xfffffff7, 0x4, 0x6, 0x4, 0x4, 0x4, 0x0, 0x401, 0x100, 0xc7, 0x2, 0x3ff, 0x0, 0x9, 0x1f, 0x10001, 0x5, 0x0, 0xfa, 0x80000001, 0x43, 0x9, 0xfffffe00, 0x7fff, 0xfff, 0x7, 0x900, 0x8, 0x101, 0x6, 0x7fffffff, 0x3, 0xcf, 0x3ff, 0x0, 0x200, 0x6, 0x8, 0x6, 0xffffffd3, 0x5, 0xffffc1d1, 0x80000000, 0x4, 0x8000, 0x4, 0xfffffffb, 0x7fffffff, 0x5, 0x0, 0x7fffffff, 0xb1, 0xb5a6, 0xffff7fff, 0x1, 0x7fffffff, 0x3f7f1a84, 0x35, 0x3ff, 0x80, 0x1, 0x0, 0x2, 0xfff, 0x0, 0xfff, 0x0, 0x7, 0x4, 0x30, 0x5, 0x0, 0x172, 0x2, 0x4, 0x0, 0x4, 0x401, 0x2, 0x8, 0x4, 0xffff0001, 0x40, 0x9a9, 0x7fffffff, 0x8, 0x6, 0x400, 0x3ff, 0x7fff, 0x8000, 0x7, 0xaf, 0x81, 0x0, 0x20, 0x779, 0x7, 0x0, 0x4, 0x8, 0x2, 0x9, 0x8b1, 0x0, 0x800, 0x7fff, 0xff, 0x513634e8, 0x3, 0x401, 0x10000000, 0xfffffffa, 0x100, 0x1, 0x401, 0x6, 0x3ff, 0x0, 0xb3, 0x1ff, 0x54, 0x9, 0x1, 0xfff, 0x0, 0x5, 0x6dc0, 0x9, 0xfffffffb, 0x7f, 0xfff, 0xffffffff, 0x7fff, 0x6, 0x10001, 0x9, 0x8, 0x0, 0x6000000, 0x9, 0x7, 0x8, 0x3d55, 0x88cd, 0xffffffff, 0x4, 0x7, 0x3f, 0x7, 0x7ff, 0x6, 0x10000, 0x28e, 0x9, 0x5, 0x7, 0xff, 0x8, 0x28000, 0x200, 0x1, 0x7ff, 0x7, 0x2e6d, 0x4, 0x9, 0x5, 0x7, 0x2, 0x2, 0x400, 0x1, 0x8, 0x1, 0x6, 0xff, 0x8, 0x80000000, 0x4a, 0x1, 0x0, 0x2, 0x8, 0x2d000, 0x9, 0x2, 0x593, 0x7, 0x9, 0x3, 0x5, 0x9, 0x2, 0xff, 0x8, 0x4, 0x2, 0x90, 0xfff, 0xfffffffe, 0x70cb, 0x80000000, 0x101, 0x0, 0x9eee, 0x1f, 0x9, 0x9, 0x4, 0x1000, 0x0, 0x1db, 0x2, 0x7fff, 0x740, 0x1f, 0x9, 0x6, 0xa9f, 0x9522, 0x1, 0x9, 0x7fffffff, 0x7, 0x80, 0x5, 0xc23, 0x5, 0x7, 0x72ab, 0x0, 0x200, 0x7, 0x9, 0x0, 0x83, 0x4, 0x40, 0x3f, 0x5, 0x5, 0x0, 0x401, 0x9, 0x577c, 0xa90184f, 0x3, 0x401, 0x4, 0x10001, 0x2, 0x401, 0xffff, 0x200, 0x7fffffff, 0x5, 0x7, 0xbc61, 0x5, 0x1bd, 0x45f, 0x5, 0x4, 0x7, 0x1ff, 0x1, 0xfffffffe, 0x0, 0x7, 0x20, 0x2, 0x399, 0x4, 0x2, 0x5, 0xfffffffa, 0x3, 0x7, 0x8, 0x3, 0x7f, 0x3, 0x8636, 0x7, 0x1, 0x80000001, 0x9, 0x0, 0x8, 0x6, 0x4, 0x6, 0x81, 0x7f, 0x9, 0x5, 0x2, 0xab, 0x7f, 0x9, 0x1, 0x1, 0x9, 0xffffffff, 0x10000, 0x81, 0x8001, 0x8, 0xff, 0x4, 0x7f, 0x8, 0x8, 0x4, 0x401, 0x1, 0x401, 0x8, 0x5, 0x7, 0x792e25d2, 0x8, 0x3, 0x4, 0x9, 0x9, 0xffff, 0x6, 0xfffffff9, 0x6, 0xfffff781, 0x4b, 0x5, 0x7ff, 0x7fff, 0x3ff, 0x0, 0x800, 0x400, 0x7, 0xc4e, 0x3, 0x8001, 0x2, 0xa353, 0x101, 0xde, 0xfffffffd, 0x6, 0x0, 0x0, 0x9, 0xe3b, 0x7fffffff, 0x2, 0x1f, 0x70000000, 0x2, 0x1, 0x87, 0x2, 0x2, 0x101, 0xdf, 0xffffffff, 0xba9, 0x3, 0x3, 0x0, 0x734b8916, 0xfffffffd, 0x1, 0x8, 0x4, 0x5977e17f, 0x8001, 0x3ee, 0x7, 0x9, 0x0, 0x8, 0x6, 0x401, 0x4749, 0x3, 0x8, 0x7f, 0xad, 0x0, 0x9, 0x80, 0x8000, 0x0, 0x9, 0x7, 0x8, 0x4, 0x9, 0x303, 0x0, 0x2, 0x3ff, 0x3f, 0x3, 0x758, 0x2, 0x3f, 0xffffff7b, 0x55, 0x5, 0x6612, 0x5, 0x6, 0x2, 0xfff, 0x81, 0x7fff, 0x20, 0x1, 0xfffffffe, 0x10000, 0x3, 0x2, 0x7, 0x6, 0x3, 0x6, 0x3d7a9127, 0x800, 0x200, 0x27, 0x2, 0x6db8, 0x9, 0x10000, 0x7f, 0x1, 0x400, 0xffffffff, 0x8000, 0xd2e2, 0x29c, 0x8fb, 0x1, 0x7fff, 0x200, 0x5, 0x9, 0x4, 0x0, 0xffffffff, 0x9, 0x4, 0xff, 0x1000, 0x4dc3, 0x8, 0x10001, 0xff, 0x80000000, 0x8, 0x6, 0x6, 0x5, 0xc7, 0x3, 0x5, 0x7dce, 0xb68, 0x1, 0x10000, 0x0, 0x400, 0x80000001, 0x1, 0x5, 0x7, 0x34, 0xa040, 0x0, 0x7, 0x1, 0x2, 0x9, 0x7fffffff, 0xa15, 0x7f, 0x6, 0x38, 0x4, 0x3, 0x2, 0x48, 0xff, 0x40000000, 0x3, 0x5, 0x3f, 0x8, 0x81, 0x5b21, 0x5, 0x80000001, 0x2, 0xffff, 0x0, 0xb574, 0xffff, 0x20, 0xd34, 0x4, 0x7731, 0x6, 0x85, 0x4ae, 0x5, 0x628, 0x0, 0x9, 0xfffffc01, 0x1, 0x9, 0x6, 0x6, 0x3, 0x6, 0x4, 0x2, 0x1, 0x4, 0x0, 0xff, 0x5, 0x6, 0x6, 0x3, 0x7fff, 0x7fff, 0x6, 0x81, 0x5, 0x119, 0x550, 0xba4d, 0x3, 0x39, 0xffffff7f, 0x7, 0x80, 0x73]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:01 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3287.288324] loop6: detected capacity change from 0 to 40 [ 3287.289970] loop7: detected capacity change from 0 to 40 [ 3287.302811] loop1: detected capacity change from 0 to 40 04:25:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7000000, &(0x7f0000000a40)={[{@gid}]}) 04:25:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) preadv(r1, &(0x7f0000003640)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/120, 0x78}, {&(0x7f0000002380)=""/226, 0xe2}, {&(0x7f0000002480)=""/236, 0xec}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/135, 0x87}], 0x7, 0xfffff000, 0x4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3287.326673] loop3: detected capacity change from 0 to 40 [ 3287.337167] loop4: detected capacity change from 0 to 40 [ 3287.339287] loop0: detected capacity change from 0 to 40 [ 3287.377907] syz-executor.7: attempt to access beyond end of device [ 3287.377907] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.379781] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3287.383967] syz-executor.1: attempt to access beyond end of device [ 3287.383967] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.385102] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3287.432658] syz-executor.6: attempt to access beyond end of device [ 3287.432658] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.434552] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3287.435291] syz-executor.7: attempt to access beyond end of device [ 3287.435291] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.437455] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3287.484805] syz-executor.3: attempt to access beyond end of device [ 3287.484805] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.486670] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:25:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) sendfile(r3, r2, &(0x7f0000000140)=0x3, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x8000000, &(0x7f0000000a40)={[{@gid}]}) 04:25:01 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:25:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x24}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x4, 0xee00}, {0x2, 0x5, r3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cc, 0x0, @perf_config_ext={0xb, 0x2000}, 0x15182, 0x7, 0x0, 0x0, 0x407e, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r2, 0x0, 0xfffffdef) [ 3287.620745] loop1: detected capacity change from 0 to 40 04:25:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(r0, &(0x7f0000000540)='.\x00', 0x4000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x7f, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000300)="faf468e1d86dee68c2f48619eb442e8f90a338cbee6858b80be653f5beb9a2ced646d85309d7bd544635b8f93a5d1f8cb34509a551f80a1d428a64182ae7c5d03b90f7c0623401bc0b30a95eec1067cda28de08fffc16be60a5c4b9aea6a648034568e85d785c5b38ad45bc937551e1c2fc8708882c0cf48600248ebf523a6134be7d1a2e3e5aa155344d4a145ae7c940cc80c2aa2dbccef06d548e0d9e95f13e01b931a7669477ed6cfd8b3a91623e4be45fdf458a48960b32957cf0b366e9e581b285aae749fd3186cd0d64906000000de00"/220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x1000) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x600100, 0xfa, 0x2}, 0x18) write$hidraw(r5, &(0x7f0000000400)="474d8691706c5570e8b8dd52a8457ee0473cd33a3b41049a54de6ad0dcb15ae09fdbe45d430ae90c9d41bcc8ad2f3199cd56279b4bd9a1d7d1eaecd49910c7c241f386bebde8fd89ddff733aa8902701bba45c0a48adbe39cb6ae9848bcbc4828a291f5fe2f1d5f1ecf3412dd1ffbe3e090175b418a41367b65321ed5857f74345cdc79b185ac6c8838183e84c2cea70d0bed9bd72ed31ff87c72953c0938c33d358eb0ab9b64a7946e7c2508aced85cf2401674f3e78d72ae90c86d4b3cb1", 0xbf) [ 3287.723060] syz-executor.1: attempt to access beyond end of device [ 3287.723060] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.724913] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3287.790171] loop0: detected capacity change from 0 to 40 [ 3287.810277] loop6: detected capacity change from 0 to 40 [ 3287.816752] loop7: detected capacity change from 0 to 40 [ 3287.817906] loop4: detected capacity change from 0 to 40 [ 3287.961824] syz-executor.4: attempt to access beyond end of device [ 3287.961824] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3287.965972] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3288.003257] syz-executor.6: attempt to access beyond end of device [ 3288.003257] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3288.005097] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:25:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x9000000, &(0x7f0000000a40)={[{@gid}]}) 04:25:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="601ca02b36a1d90e995ed9bb464781d602c9e0ffec0000000000004ae69acf457ccdfe7c1cfc54144cec95aaee73dd254e819f23320767513dac9dd21fa345a8b38f9905e9fb0954bbcf9383055c61bbffc1d4b703b5e8ac8c43ddf871d1565fd5571440b9e585940fcda726d57e8031adf8ddf8c75d4a0b242081fd3211495d5b53aaff21cb49", 0x87}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x39c9033e}}, './file1\x00'}) name_to_handle_at(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0x4}}, &(0x7f0000000340), 0x400) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3302.955541] loop3: detected capacity change from 0 to 40 04:25:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x4, 0x240000) openat(r2, &(0x7f0000000240)='./file0\x00', 0x10402, 0x30) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:16 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:25:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0xb00, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) execve(&(0x7f0000000340)='./file1\x00', &(0x7f0000000480)=[&(0x7f0000000380)='/dev/zero\x00', &(0x7f0000000400)='/dev/zero\x00', &(0x7f0000000440)=']-(%\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='{-%&\x00']) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0xc2900, 0x0) write$P9_RREADDIR(r3, &(0x7f00000003c0)={0x2a, 0x29, 0x1, {0x0, [{{0x0, 0x1}, 0xffffffff, 0x7, 0x7, './file1'}]}}, 0x2a) 04:25:16 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x200000, 0x1d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6f, 0x5, 0x0, 0xa, 0xd, 0x4, "a2aa24cd5a011ba62d661606c73c6db9b7bfbc6604a16ecc0ad967f85cc6ccb92c59f1f9e134fce0d86a112e4a9eba3421ecba79478f81ef8714a0569b3b44cf", "f4317ecd12c7fc8d2a4a1605e7c994e5e333d9a9746a99dbe66d1855345e42020da9928e2e4548cff5f15a740dc269bc8c6449a6a847d9ef8d37e89d3df9235a", "de08f88e1789578352db413c25944d43961dd1b3ca684502c0a38edd9ce70c34", [0x200, 0x4]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001440)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r1, 0x0, &(0x7f0000000440)="ea89c0f0a19259bb25fb225c0e7134167bb18a7d72955c5cb7db989e0ac4d586b0b0fb39e2b6c784db6944d1521c98611fe2b7c4f22934ba6089c8b48ebde23886ba10054a9b4b3871e05e3104436a3fc01cc2d3ffbc7af0981a5ab3358218b4732d00be15aa641a711d3085aed7ee766cea1f9c37e77fdf37cf45d357335e38f337330de8fad9c32794dd95183f046fa02e0230e40981bd1055f7310ca23ca5a5b0d500a97e254919c717794a57a08b41d3542e2ac7d75e7ecd39cf82b9c3ba0cc4fd823757f1b382036cdd2f37f4ed654596aa08208c4f5a38e6e7e54f2f408302860bc9505f0065a94fc2b96cec3c68337454680362deef93a8030e8356e67b5a66f8ff4438a302064e6b5ca82ba1d87d94343602dda6ea6fff6fe20ed19a33e4a14f142e4c3aab13966d50a0911133b5996fbcd80c1664414cb872379c7f63c172ac8645e234afe0596a201390d476328e1152abf3268b72c82811a935ba34d3a3be1bef95cb5b280211c9c5e2173493812907725f3cfa0f088dce10e18d9a95eaecf353ac9e4aa29cba752370cfb53165facab1e3e67ff9a2a175477827e9d39887bc96416d9f18ca440359a606dbe62d16d2f506394fbf92557c934fb2d7f397bab34975b7807bb0d5343b2b5f112ee5743a75f7104967a34c25315e3f0c9b0840aaa0b4445eaa77bb323dd2b9091e0a918db84feb450a11cd4f4ad82d3126e37afa7602424d30b4848a44a1783e62da2203573cbd47eea403f414404dd32e819c232d2d3d23dade8a735f09dee22102000ac103c4b9dac3bf205b58f5b367bebcd4edfefcece839d0e30c7c363c30e080eac3e12094dbcadbc3f81b7b5d37232fa4ab671922adced79946c0b06bbf511553784b4ca6f4c70cd69e4c92c830cc63dfcef73aa63ee15aaa6671016f5259dd15270e0c2712562a78575bf78ac637b09616e954c6dd2ba6e5e0873844aca798443786d988facc00c71b0e1934dca442c0371077568045402c6b0abb9df790cfa13229ad87c54e080892741e97453cce6e14381fa426fcbc8b29a1fe6e0fcbed492b5ec49a56db845e6ee2786ade1fb410b20269b25c835c25f0d51a0186550d41d1d4801086ff373e4dfeae3d3be41179f40abfc1b3cbd33ae801a59369d98abdaf7c877509c2c3daa3a08ce1692dcc506ac1696e099c7d2c0c98c12928bc26bf37cced8f94eb475339f3f891a328dfc52367e327e3462783ee99f3f8f26b5a3281515189211cb1e66be0f4950c0e6543a0b3f7603c6117ad67b07f4761a0893cece45b7bf2f6539147e6d4c3e2fee023f85bbeec817d773d082bd12919d8895b8a3c75c78f053c501a9abb0ce76ac387d902e2028a0b95c5a93343acb506abb51f740a875e0e14500ef8a55088e383224dd073502380c32b78622a50fd3f067f51fab71847c8720303518bd2079788848b99fddd659adedd0475bd5e97f4f2a917eb512844b1fff074a2ad0d99400857b78955fcc15b33736aad10dc23b01e86710554276400f00599280e409baa842a71f3da32edc5f500ac5da9abebfaba84a055077380d6ebc7043acae70ca2b79dc27a191d4319758cf5b2315a6bc52b3702e0aed2cbe63b3bc43c6d227a8e8e8760be742b67ac9010ef4ac316980d192647656dd123fc8273055d63e7061e74773ae8d144b5c2da600e7e2204a363e9a30518f099b75c406f598489094d497c35c2a45e2296669f8311cb067a5efdbe3bd326a9d6c997e134123cfb737919e67aac5a1a4869b9b97bc20f68f7aa65f9aa305af886a74df81b866fedf088add61c69a5c19544eead528a3c95377a9fdcbf0a6521f8a96562faec1ea99a03d9b529ba8e42d26d84de6afb2f40a59e68e23a8065101a4ac964c5e889445518f11e32bf90aa7b23208b1aa697961e0c88f4af88368e310d712364e224c788cba00b6d86090764f7dcfbdb9d1e3b503c1ae48871438a9f1d7b57c38ba3f06d3f7d3f2041c1a2629e9f20243d69cfd7fc044b3e04e7347eee2b8634b07c2b2c43645e83e8b0d3766da0298f0bc7868ba42dddab432877662ffd161453070fc52d83280c0ae940d3e0dee02f094d7c7b75a87cfd86142d7f3f474d0b6305611389c3415fefca87e638e14449e492845d130355d25f08d60d3fbd4b006197d34af68a89f106ef4779031e8b0147589906c811086059de6d509b803fc7ed46497da23d27b5c2ed67ac033e2b0c2e2fcb5fa0ae8ed59ec516a1e182d5ed62a080c889218b2f0bf4b5349a0ef4dc2812d941951f716f2d77a9f14395248e6c326a9db5940c80498613f3cbec4f28d9a0835f7dbd492259d8324b16f6cd6f7e4a2cd59145729c12c63f4bfb50eec1709b80131d5d04b02595e807628fa4ba4c4baa6a82802ebd32df192143e32c33915a281727fee9fed8ef24544c59682dc9d6ae932e5ccaa0255d46bb7fa5890bc784617b8b59ba2bedb9bb0bba1b19a46b766ff60a0430dcbcfb40942bd0583c55271bf921a3ea88c45c9cabe3ba544aa7487a8a7b887b90ba304c8bd01a1d5a7f849b76addf2e8e0af688fed6448de485d162e7504547cb04b70103b73a035093f3c1a77b6079fadc6cc43144e5733d4829a3457986283b2fb80e7f5b9afd98fccb972b2e82ccbc8a037b5c82932a7b4c150362ef6b3cda15ee0dede0f1e8aecb0169e43c925417e56a7ebc582ee73c46833b863832e704b09baba0d0f561c89fbeefcb3d737ff30122e18a155f16d74bb4f198043b90c441cf110c28edaa4b51e26ab6f37630b7f3c010279366470f5859e2f3b8326b6f07df541b304834054c0526ebad12e43ce3b0fc6336d66814afb7f2a1f8ca79fcec901b59abdb3f570e3a4d6cfa564234c4f1792ec0b20409b981535e5e7f26d33998d2094b0c4960112ed31fb85934beb831967c88e62e71618f4ac9fad6ec39774bca69dcb7739632024cd78fcc43cddf3137404b04466755f4074b6bbcbf68c46353fc12882f57d0cd86b748ce59874305c64d3ca69b5e2fcf158eb6b774d2abd17d7e7a0d9571d3e61ccc73f8cc95b9823fa86e1fb9d5f5147f0c21634817054d1782fb833b156b12e3db34c70786c9c73d8c22a6e2c469208678edc8a38ae8b6577c98093c3ee925f687b776abbe3bebc154a24c7c167dbb7f204b00f7793e06b3dc13e28f21afdbb860b10254c448392b6a12feb7b24f79dbb73020aef70322fcf8b32598d8b02fca0ffefd7b9f92d5977de84f958ca2b8a5d0ec29137413de12bd11ece59563e1997b5c477dfec35dec1f63b33a1336bfc1017b82f95a1bfeed152111f2f5f6c30ad522b401daf233578484f65bde0da2f857dcbfa800c920c66310a3419b8e70ee28ee564584c4600f36b767d2d6a04a57013fc35f13b8909196685a001ae3cb46c36de5457fc933cf54c308f21b4236cd6c11bbc3d04dba86f7e3726f4cc9b6bcfa6c9b5d2483c97f5b686ec1843e0f575c625d03373fd74798261f3ede8f004cb4fbb9852d8e6313d910c2858854ec87e5f3f450c0ac48d8a1458afb4718e7a0bcb2a018dce4bcc30b0afb1ed6a4eb61f19299060560f3dafc5f73c657713f44182baf13af1ae4ac1157cafce48da2c8cf4b8fc1bc6fa3e2c06b929ae66e0d6f99471ce107352305a62459fb3dee46d451adc8b785de17791d6797b987195cab6f1460bfdc0a186224ec8926a2ace864039f9cb1ee6a0d8c025fc44d6a185b0ef3ad1ef36cf1434e861515acfa1de2cf4ca814297e1d976a5a4301c7e405736a105a738217454f0c197c96cc62a92d9440995a1ebdca949cab0b369e241d8f0d5c395588a30285fad2fc29dac440d00127b62c032288d6c692e397c69151c4c6a02bbbe5463c0525843ec27e6eaea48f026c6f8c30fe0ce18ee7a534596e71b8fbddbf890943ebf146c0ff60f05c97f3c220fab71d2afb3fbe8f45108ae888c696b8991fd0cc9e7ffca241372f77f7b831e1ce3afb667161451b9409e609842a8045f64dfca730f8840ce7a918a2ee2dbb993e951f0ee8ff1988b37aab18a7a68653018dffbf09828b1b1f4a0900f414db8fc257c2ff061115498562d7d277f863001b3b43c4028b7551f550f023be2bfa1dc193074a04006073fbab10dbb75d2c942513eddc0ab7cd0e7d15fda4c675e59254cd9e1632652d2b6f8cc225b403b6f59b3411f0211821a26715acc716e6e91be15552c3c8e80b753dc568352ef9ef7dfcb1c883970d7ef9b66e66dca9c605638acf9ed6ce9b8ede3fdc6139f568fce8b2ef5663cd61a596dac0778f3bddcab6a18fd7c3c9e3d4b92f4b29a71891605d7e1e3be7a956a72d50c94e993fe429f4bcd15ea81336a61be120c630c3acb4eb66fbc95e7a4b7108a01c5ed2906a1d7495b6fa4580d23d0f082fc1ff43aadf5bb21b7adbd1f40a14a7891e967a98391f5a06edf29906e2fee276bb48450d408ba37271a7ac1768e04669f0799a4643f3c2d7aae6a6c2f608ecdbbffd93577217fec9c82b50aa24b96f399a56b0080af44babf10455271e65c7042e5a4f3689465230d7b7795651b7521139ab89b8a352a6899f1f7d2378e6efd22d07d50994080f4e4695124ffe212238e24b047ba103a77bce60eef25080c09b73da46b92179e6a214ede2e71824aaa1868ecd360157066fb9ea00796cdb35fede069c98161f3e45925cbe9bdffd93f48cfaa840488d61a1a711ae3b3a3ff4e21b135fe010e5d9020d64ce977568994fcf6bbfc619237897fad5400932173cf98bcf8b8b48dcfe9ff9e636c7923c6ff88c59f305cbd913d045751b908450243272a65d1051d33f2ad38b7295a8243512eeb30177ef0ec69fd9e308f133fde92d7274a31b8b3940bf7fdbdf2bcfdeb2057ead2a4ef0b0ad1dd7b12b6933d8331a5241fd375c0c814b6afb87e1433eafd105226f2ac64c9e1430dec88ea0d71929e3b0a3edb8be8eea4ea2aaf3756d37dff5ec32d027569c17994a9672c3facc321499a8310fc7179457d817bc01ce95bd3f3a502c4c754685b94752101388b16dc73b91842b9d8c185fda03221bd4f0e2c6f4ed86b4f87491085a45ca111dc3fc29bbf398be443e29243f1f2d34f1ad5bbfc4da65449ab478d9dc005c76b545fb88c5d3bcaecb13cefbc836e5a00cd8b388c7ad5641ea6cd663c3c90b80c288999fa4ea536349f84eb7efccc2bed51a73cbb28b87040da49ed2e7c218b18a45fc43b15fb562560a8ffe542e79f9d319470003dfc18f21f03a0400ad1c3bd70e7304c15809aaa2cb27f9a9a5357eda6252b1ccd93657b6136f3e040169df26b46a194a30afb66abf10bbdcf6316fe74109a37ef6e7e07b9639d1f464a1fb6249f6dd8843a5e725206442e9f4ba2b32336689c4a2b3255b720899ad003521c9d3c3188e70da739ea61e3c329ea4c76599ea1851f334d7d2272b37dcfe7b080ba61ee99bfe828fc347ba261baa44ec3355a5472e36959b65bf0d8913316fadf58c2136057dfbde2a3dc965bcc318812156cb8956fbd514b53accb8fb41a3c1d60bb6ba255fc475802ffe32225fa80914b6149348e433e0c4ea9f5f662a0701b2b735872b929b6cde10b202a17e37814bd91468037879d9dbed05653f5d619136cca5168b8e279d8ec1ea213bc74059aad09accf8c723e2bd72119c143a2986a30dd4f90edc2a0996e1e6fbb099aa8d1539a31d1ac21fbd7c0998f3c3ce292e5814b47e47998120213a1514b020337fae67c8a407d634559442f7156d5327935f4c85a787fcffc0a7a6dd04208e4474d19ad8e687b936", 0x1000, 0x20004000}, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) openat(r4, &(0x7f0000000400)='./file0\x00', 0x400002, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = syz_open_procfs(0x0, 0x0) fdatasync(r6) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r3, 0x0, 0xfffffdef) 04:25:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="19c622655155e94657fb49be7c0a98f58f9d0674d70591806dbb3593b78956ccd7fd19ca4aba1eec9d8e804c76f10ea72abe344aef13a286922689069912188520638182721624d5baf0dce61638f17b96a20cbd3a164f70f3181048fc5e566c242e178c49226ddade03aba311ca59e12ab1959c6f34f929b7013c26ac4ecc24e4d2b1a720b9e8eb6aee", 0x8a}, {&(0x7f00000003c0)="330adfa5ab09ecb93d07e8c2facbd586321b854d5d82ed17156079b272843c9b908ffe43d6f45d77469ad8fbddad878164ab4183a1135d010b9c7630efb4b6e37e4529e3dc875eea128776fe576e8e9b3957c3113fc43e1ea51efddd7e9251eabdbf2d903d4e8beea951aad464021ecc6c0ccf1da03bf95c7c4c6c8f59a3d7edf616a3b94b60f0bb79f13420f8d21ba969de3106565f47675ec3", 0x9a}, {&(0x7f0000000140)="4513922bc4ff5cfffed56fa6c4669a5cc74cb65f769a73ee40bf730e738477671876f9da40e985dfa28a83e8ca3c79cd579239382649d38ee5518a02b168cabae193c98046a2990e9fe84b23e0e0c70f03336a3b1e1a74b6e568f55a3fb2e0027a820d6f9e57f2bc2ea4", 0x6a}], 0x3, 0x2, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000240)='./file1\x00', 0x0, 0x130) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3302.971734] loop7: detected capacity change from 0 to 40 [ 3302.980907] loop4: detected capacity change from 0 to 40 [ 3302.984124] FAT-fs (loop3): invalid media value (0x00) [ 3302.984850] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3303.038230] loop1: detected capacity change from 0 to 40 [ 3303.042222] loop0: detected capacity change from 0 to 40 04:25:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xa000000, &(0x7f0000000a40)={[{@gid}]}) [ 3303.052746] loop6: detected capacity change from 0 to 40 [ 3303.082344] syz-executor.4: attempt to access beyond end of device [ 3303.082344] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.084657] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3303.093778] syz-executor.7: attempt to access beyond end of device [ 3303.093778] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.095709] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3303.134352] syz-executor.4: attempt to access beyond end of device [ 3303.134352] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.136225] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3303.204461] syz-executor.7: attempt to access beyond end of device [ 3303.204461] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.206388] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3303.250853] syz-executor.1: attempt to access beyond end of device [ 3303.250853] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.253170] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:25:16 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3303.344680] loop0: detected capacity change from 0 to 40 [ 3303.380866] syz-executor.6: attempt to access beyond end of device [ 3303.380866] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.382910] Buffer I/O error on dev loop6, logical block 10, lost async page write 04:25:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xb000000, &(0x7f0000000a40)={[{@gid}]}) 04:25:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r0, &(0x7f0000000140)='./file1\x00', 0x280040, 0x4a) [ 3303.685019] loop4: detected capacity change from 0 to 40 [ 3303.809077] loop3: detected capacity change from 0 to 40 [ 3303.830241] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 3303.841326] syz-executor.4: attempt to access beyond end of device [ 3303.841326] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.842618] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3303.859862] syz-executor.4: attempt to access beyond end of device [ 3303.859862] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3303.861724] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:25:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(r0, &(0x7f0000000140)='./file1\x00', 0xa080, 0x80) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3320.342211] loop3: detected capacity change from 0 to 40 [ 3320.346035] loop7: detected capacity change from 0 to 40 [ 3320.355234] loop1: detected capacity change from 0 to 40 04:25:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x24) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 04:25:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440), &(0x7f0000000480)={0x0, 0xfb, 0xdd, 0x0, 0x5, "acd57f4c5a76d8cfa006607e368dd188", "b2b76f4b676af31aed0b03a8350859e76f5f41570995b69b9fefa572371b66a9bc9e3cc76e8a0e521a6fb514b161cf980683edaa1f5cb323c6db668a49f6ba367c257ba58d0ccdf26f974590229eae7fcd268785ed3e57f70e9ec8ca5f3fe1bbf8ee2268c48dc5ee10824b6200f814f2a9b172dec0d6eb5009e611ce01145d3b2a2a123fb23cc2afa7b716dc7b208aaa025b418f00ae0169b6288622a28172f3c1678cae05c76f7cec3058aff5c6b039397b22cd5bc3dfa8289d89a48f7e76d77b1a6eb1b22845e1"}, 0xdd, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="010000270100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file2\x00']) sendfile(r0, r1, &(0x7f0000000380)=0x100, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000003c0)='./file1/file0\x00', 0x80, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0xd8004, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000300)=0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x1, 0x8, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x8000, 0x10000, 0x54a8, 0x6, 0xfff, 0x8, 0x2, 0x0, 0x8b, 0x0, 0xa1}, r5, 0x6, r6, 0xa) 04:25:34 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:25:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB='n/file0\x00']) fchownat(r2, &(0x7f0000000200)='./file2\x00', r3, r4, 0x400) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3f, 0x8, 0x8, 0x3, 0x0, 0xfffffffffffffff8, 0x410, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0xffff, 0x2}, 0x4000, 0x6, 0x1, 0x3, 0x9, 0x3, 0x200, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 04:25:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x10000000, &(0x7f0000000a40)={[{@gid}]}) [ 3320.379963] FAT-fs (loop6): bogus number of reserved sectors [ 3320.380571] FAT-fs (loop6): Can't find a valid FAT filesystem [ 3320.386848] loop0: detected capacity change from 0 to 40 04:25:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x408800, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r2, 0x40}, {r2, 0x7714}, {r2, 0x8010}, {r3, 0x8100}, {r4, 0x4402}, {r5}], 0x6, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r6, 0x66, 0x3, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x61) shutdown(r7, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3320.446969] loop4: detected capacity change from 0 to 40 04:25:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3320.500736] syz-executor.7: attempt to access beyond end of device [ 3320.500736] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.501944] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3320.512326] syz-executor.3: attempt to access beyond end of device [ 3320.512326] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.513599] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:25:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @perf_config_ext={0x5}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3320.582041] loop1: detected capacity change from 0 to 40 [ 3320.600273] syz-executor.7: attempt to access beyond end of device [ 3320.600273] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.602302] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3320.644741] loop0: detected capacity change from 0 to 40 04:25:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x20000000, &(0x7f0000000a40)={[{@gid}]}) [ 3320.713238] syz-executor.4: attempt to access beyond end of device [ 3320.713238] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.715189] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3320.727169] syz-executor.1: attempt to access beyond end of device [ 3320.727169] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.729592] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:25:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x10000, 0x102) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x22, 0xa, 0x9, &(0x7f0000000180)={0xffffffffffffffff}) pwrite64(r4, &(0x7f00000003c0)="58552ac75a9d820ef77321b46e56a9400d46687d65ae76a7653d9f7ab2c420fe982b8e5780cc8822cc25e603d762fdf9a92f11b66f3f81b29926a7ca7d0490ba4f1236086e6f16ed0dac25041e12f5b781e34ecac39fcc04d0d60825f0511ce8", 0x60, 0x1b93) ioctl(r3, 0x40, &(0x7f0000000300)="35ef034743037bd607e8bc211e9ef5afa576808fe1b5447409d91c08688a17745a26d28d524edc64dace7af5ecbddfc113299eb2c715f486ac2c68d7fc96e881a219f65665e68ce10d9ed3dc8efb521cbc1ef70bb7ed45977b946786a8e3f342d3300132cf05a97a672dc11237a0d362c679c10521ef10a430a9459963800ac928fc024887be8fe2215d26ebbf27e4dd0a2060bcfdd22605a813676660499f28213192cf32f9b375384fe070eb08e4f8de") 04:25:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') close(r0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x90) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x1000) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3320.863031] loop3: detected capacity change from 0 to 40 04:25:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x20100000, &(0x7f0000000a40)={[{@gid}]}) 04:25:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3320.953913] syz-executor.3: attempt to access beyond end of device [ 3320.953913] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3320.955082] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3321.014036] loop7: detected capacity change from 0 to 40 04:25:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) [ 3321.107793] loop4: detected capacity change from 0 to 40 [ 3321.273630] syz-executor.7: attempt to access beyond end of device [ 3321.273630] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3321.275562] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3321.295159] syz-executor.4: attempt to access beyond end of device [ 3321.295159] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3321.296994] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3321.320000] syz-executor.4: attempt to access beyond end of device [ 3321.320000] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3321.321867] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3321.338873] syz-executor.7: attempt to access beyond end of device [ 3321.338873] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3321.340540] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:25:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)={0xc, 0x88, 0x160000, {r1}}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mount_setattr(r0, &(0x7f0000000500)='./file2\x00', 0x8100, &(0x7f0000000540)={0x8, 0x4, 0x1e0000, {r1}}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5c92a292}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x12}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1da}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x0) 04:25:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r1, 0x7d122000) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xa4, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) sendfile(r3, r1, 0x0, 0x7fff) fallocate(r0, 0x4, 0x7, 0x7fffffff) 04:25:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x31000000, &(0x7f0000000a40)={[{@gid}]}) [ 3321.378965] loop3: detected capacity change from 0 to 40 04:25:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3321.420227] loop1: detected capacity change from 0 to 40 04:25:49 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet(0x2, 0x3, 0x7) sendfile(r5, r6, &(0x7f0000000040)=0x9, 0x81) listen(r4, 0x0) sendfile(r4, r3, 0x0, 0x73) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000300)={0x0, 0x401}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='n/file0\x00']) fchown(r4, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:25:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00282, 0x0) open_tree(r3, &(0x7f0000000180)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0x604002, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xcc}}, 0x24040801) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:25:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat(r2, &(0x7f0000000240)='./file0\x00', 0x3e5981, 0x4e) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:25:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3e000000, &(0x7f0000000a40)={[{@gid}]}) 04:25:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:25:49 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') close(r0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x90) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x1000) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3336.256829] loop6: detected capacity change from 0 to 40 [ 3336.265917] loop1: detected capacity change from 0 to 40 [ 3336.266939] loop3: detected capacity change from 0 to 40 [ 3336.270687] loop7: detected capacity change from 0 to 40 [ 3336.287356] loop4: detected capacity change from 0 to 40 [ 3336.341541] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 3336.423256] syz-executor.3: attempt to access beyond end of device [ 3336.423256] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3336.425319] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:25:50 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:25:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x3f000000, &(0x7f0000000a40)={[{@gid}]}) [ 3336.458802] syz-executor.3: attempt to access beyond end of device [ 3336.458802] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3336.460386] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3336.468301] syz-executor.7: attempt to access beyond end of device [ 3336.468301] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3336.470296] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3336.507729] syz-executor.1: attempt to access beyond end of device [ 3336.507729] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3336.509552] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3336.528756] syz-executor.6: attempt to access beyond end of device [ 3336.528756] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3336.530746] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3336.599659] loop0: detected capacity change from 0 to 40 04:25:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3336.706466] FAT-fs (loop3): bogus number of reserved sectors [ 3336.707115] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3337.110198] loop4: detected capacity change from 0 to 40 [ 3337.144073] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 3337.560946] FAT-fs (loop3): Unrecognized mount option "" or missing value 04:26:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x408800, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r2, 0x40}, {r2, 0x7714}, {r2, 0x8010}, {r3, 0x8100}, {r4, 0x4402}, {r5}], 0x6, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fallocate(r6, 0x66, 0x3, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x61) shutdown(r7, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffcb4, 0x0, &(0x7f0000000200), 0x26580c, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="90"]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:26:05 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x40000000, &(0x7f0000000a40)={[{@gid}]}) 04:26:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xb9, 0x0, &(0x7f0000000300), 0x928010, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb}, 0x15103, 0x2, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x4000, 0xc4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x280600, 0x11) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3351.322745] loop3: detected capacity change from 0 to 40 [ 3351.325063] loop1: detected capacity change from 0 to 40 [ 3351.331704] loop0: detected capacity change from 0 to 40 [ 3351.341591] loop6: detected capacity change from 0 to 40 [ 3351.399333] loop4: detected capacity change from 0 to 40 [ 3351.404988] syz-executor.1: attempt to access beyond end of device [ 3351.404988] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.406021] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:26:05 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x48000000, &(0x7f0000000a40)={[{@gid}]}) [ 3351.420388] loop7: detected capacity change from 0 to 264192 [ 3351.436929] syz-executor.1: attempt to access beyond end of device [ 3351.436929] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.437910] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3351.440917] syz-executor.3: attempt to access beyond end of device [ 3351.440917] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.441991] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3351.470692] syz-executor.3: attempt to access beyond end of device [ 3351.470692] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.471768] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3351.473232] loop0: detected capacity change from 0 to 40 04:26:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x321142, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x98dc, 0xffffffffffffffff, &(0x7f0000000300)="755384350e0f4ca452fa08123c3b70362105fccf980ae85f5d42e5942a9befc2d1f77d0ba496cea2c55786bff45342dfd2b1837f254aa086fe840ed728c5d20dcc5269212602b031fb6d901b96e8dc3829427367018aa443bd21f811e3ef4b4c87d6076a49dc0552d61b8e210bfbc25e35159c80e24caf1dd61a4be6a3b2d1182b317dd9ee95b5871c75f9c909f88978cc6b08cb33b32b1227a636c7692fb7e76453412dcf874b0bcd69b8a2a12b7e38f87583b1f918eb4c83b4eafdc6970211a2a05a493b", 0xc5, 0x9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x100, 0xffffffffffffffff, &(0x7f0000000140)="f47da817423b8c2e7bd9cf4e51d47369ec754a00ed3a7fbaf888808193429a9907bbafcd39e7008ea83156389e9a0a7c72a5ac100f2b9b1bff984a9847fbd4ac8f0a4d0754d27d98d81d47ff1aa17ba71fb646290f8adc", 0x57, 0x401, 0x0, 0x1, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f0000000400)="7b2dea580c07f006fe54394696e209226469eca427e6ccd6df1331d449399b", 0x1f, 0x7, 0x0, 0x1, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x6, r4, &(0x7f0000000480)="e538ba8154adc1990c4255985dfad1315b32e7fab21da4d78e1afb84ef0a455fbff2c2f1d676af97", 0x28, 0x8000000003, 0x0, 0x2, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000500)="001ae6f1", 0x4, 0x1ff, 0x0, 0x2, r7}]) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3351.611389] syz-executor.6: attempt to access beyond end of device [ 3351.611389] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.613591] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3351.617728] syz-executor.4: attempt to access beyond end of device [ 3351.617728] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3351.620175] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:26:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x4c000000, &(0x7f0000000a40)={[{@gid}]}) 04:26:05 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x442680, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3351.689856] loop0: detected capacity change from 0 to 40 [ 3351.742189] loop1: detected capacity change from 0 to 40 [ 3351.815215] loop3: detected capacity change from 0 to 40 [ 3352.039334] syz-executor.3: attempt to access beyond end of device [ 3352.039334] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3352.041218] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3352.245349] loop7: detected capacity change from 0 to 264192 04:26:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x800}, 0x15182, 0xa, 0x0, 0x0, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x10400, 0x4) 04:26:20 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000380)=""/133, 0x85}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x68000000, &(0x7f0000000a40)={[{@gid}]}) 04:26:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x7, 0x3}}, './file0\x00'}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) mknodat$null(r3, &(0x7f00000000c0)='./file2\x00', 0x20, 0x103) 04:26:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r7 = syz_mount_image$tmpfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x5, 0x4, &(0x7f0000000e40)=[{&(0x7f0000000b80)="0c95e591e8a9a695be3c8da240e70bae86f66823a3a6b3b5a5bedf470d1a5c83148c8bfe323f4b9433e672c27a56684763b557921db5f58dacd35f9714ab04f7eb4b96442d945e757c416c62591481b33d809645bdda8b29781fc0b615206f7a0a4c657c39c04f9b73fe0ccdb8d2becb58adc865ae6730a39a3db890f94b85e03d1d4b383c656971079db7e3bcdd6c0d4f5e", 0x92, 0xffffffffffffffc0}, {&(0x7f0000000c40)="ef1981b2bbd526bb874fbb284e08e350e07c96e1012234d6347c95fd2a823b08dbbc9c3629ab3ba2dff2a8fbc815be4531155b7b1c50654fec33e60243d88a1958d1568dca7fdcb63e3eb6d69a6491914e8ce5b4794e808e7a242e57fdcffb70e837d6e6974ca9fa63b362eab39482b38d53971530f0d7cf1bc03397f968aacde03b33e1f9ee375bc30dc12d81c5cf4abb9ae65feaba620314fb839d740acd6701876695bee81dbdaec0ff3179da", 0xae, 0x7ff}, {&(0x7f0000000d00)="e1ea6b507d7b7634eb76aeb3248932400fbb5edef936154f83514986f6385cced9ad0ae5db8553cfd863d212d7a3add35ffe70452222cbd6d572d1", 0x3b, 0x1}, {&(0x7f0000000d40)="4686ceec77d45a4a584a4d5b64129dbe701ff271c28113985f66c76f4abdf549e581d7f8a7ad2d0ce0a6c745717a26e58306bb03f9204ae3871ebf914b9913849ded1e4605ff90522682421320781b3849b179f227e50bbfee4dd178d2162d3d60351d63c94e1134a16a3806fef0630a3692f38b658b1b6d669b989429f50b1a92c60ebe3e590102080715e30dc9f437cddf6dedf8f2c8f47399957dbd5223e6d96f4791946829e69af4d77b024bc5be036ad5e23bccf4d1014878ed44cb16b529aba86653b4d49c10019cd489e5", 0xce, 0x346}], 0x80408, &(0x7f0000000ec0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@size={'size', 0x3d, [0x34, 0x31]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@hash}]}) r8 = gettid() stat(&(0x7f0000001040)='\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000300)={0xc0, 0x2e, 0x300, 0x70bd29, 0x25dfdbfb, "", [@generic="521b7e164392d0b9d511d4dc7eb861e40e40e6d3791fa47bcc88584f410997470d93505cb9f7d7b823eb2cee577b6b912a71d8abb6d79f04182002bf485f38554df54a960ee77a80cdf6a90063cd71474a83cefec9edb6a04685a6b863fc7d7bdd022706db28ee645120f33e49325850dbe52a740fc9ab0c2eacc7e997ba12957bb01884a3cc59cee536f4ecaa7f1531811c64883a726a799512c340619eb23e8a6603793d", @typed={0x8, 0x4d, 0x0, 0x0, @fd}]}, 0xc0}, {&(0x7f00000003c0)=ANY=[@ANYBLOB="d40000002500200029bd7000ffdbdf2508001380040039004f12b50074802d7f7dc8786924c2a56299eb93fd8374a919601d026cb8998b4bca4c27e045426179620f347e591c6c99c75e99c6634cdc6759ea248a6a87b92dd10196ee56231531ed3b5342e211dd71c1b640f33a95a94b9a0e6c47f138e91f5b7a821597b11c88aa67c22504094a4b66a5b07c8ecf497432c227d4e4cb8ce84f2fa20fe4751f4c88d05ec6e5eb962021d79e0aacbcf8b26c376f14002e00fe80000000000000000000000000003808000a00010000000000000000"], 0xd4}, {&(0x7f00000004c0)={0x59c, 0x10, 0x10, 0x70bd28, 0x25dfdbfb, "", [@nested={0x30a, 0x4, 0x0, 0x1, [@generic="7e2c1afcf6ceaea36c9a106cb0fbb594ecf3ef48eb9615f8efe4403e89d3adf82b55aae8d89d92aad2", @generic="ce4cd1933c45f71d40ae90065429d5d8692db8747662b848e898cc66cb0d23758ec4a8ce7a15ce9c78548a6ad965dff058fdaa4a5f06efc90ed2d73f56d25926a3ad2a97c714d0b94e0b2fa94e531a6a578d9a2702db65d8bab4d0b7fa1282be0021048a91dd6ae64ab5055d33007f9ba32bed6750a4ce2cd457a1d5c6a95df4d211a0eece480a0f8a69fab6ba3e48e39adff0704d287718d1191c927633ec4db9890ed7f8d4bba26bfc1a6d47576433c976f778f3fc6830f256c10876574738405819f33b7d704eeeedba24508ca34f0acb784959ca0d2f6b698303336d8d2d5076ecdcab9514a8ed9c59cbc476b3fd647673e07650", @generic="ab4b692239a6d7287726c2fab30cc4d7188f7d98ab7c32ae85af803a7f5dae2cdb95d720758f299345ea91447ac96a2d928dadd8c69f2efb400d171bf445d1ec8b6c7cae06e9e74284c7598c2f9ba033094749691383fe883c98be954a8979d2af28321507eca6b622dac108471dc6511dc30436532fef58c77f9d50f429474da49f2ae89d8838c8742c8356a6c7e45ec292f518a8ba3a6694c7e0e208ddb45b257866feac763102f5597386e4d994a17b80deb87b3c36991f2fbe5386a305179dbf42412b23f01b18a59987d871877c7b2720cf5c42dd58612fb8fde73969005b252a6d6939cc9e3493fa090e9fa9d120dd8feaa5", @generic="d64ecc5904cdb8727ffd86bbe8767ee8aebea85e0e8864638271892cb7ada522367baf469e22e54d7a4cb798ac43dd3162ccb64e084c13f3a5a8ffea10ca2c45746e68be5e76bf39db36f947e932502ab0d4f90a0a3d306701835b60ee4473bbf07cf3ae3617733dc6b4194fcf09514b5ad0d5048c68c92763b57c5bebdf56d36e975124c090055f1d848f1259c8beb40095fab31e90a29bd70e7990c78ee03573bf8c89456fd5b63502e9c771cf5de7902c8ff5b2c22bbf8acec6ba1917cebf9d1d5c4eebbc944871337bf13a393c579da9c09cbe6c", @generic="fbf242c1c7c61b0880f53d550546df1e51edc92c5015eff94ffd0008"]}, @generic="68b54dd4ab8ea4e023812771c3edb254c2d6f3b7b2e4ad46a114a638b58ced44de1f1b3ff4df26b2a5c63e7bba258be8e073f0edfd3c29b62cb7ed11d2089e9c443cfb4da8a9ac26805b38b77c77a9dc6c773d1aa331501afed306635c92a7fb70fbe697c79e904a4a2b4132dbb26ba69507c66deae1b277a6bafbef8ccd434cc5cb01b8d6fbda0b54613a94a5bc3ad6f2ea14739bbd00dbcbed2abe98eccb5c55b288c3fec117b1eef8ef7c2e0754bd7f7aafd164fdcc4bbb24e5a3dffd7f6bfc4a6f579a804fc1da7e2b95dae7bce4cea7bfcdf1995e26a36bb10eb10b7669", @typed={0x4, 0x74}, @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="bd52e94b61108cdfe74fca05022ac5fc15c9ed43cc6bd0ff0d8cd7e2a301cc4519bdd675cf2e70010f37589a79ae8b164ebaf6e2465a442351484f2df4279e6620ee6cf8320b057e089a813ba4b635200509d75a0693816aa013f0f1feaa1ecc8c78e25a1862e3e679ce468546ee58d28fa5b54c3c975d43ade8a36690f916c99f4869d885dbf908a8331ba3b12814a1752e3a4dbb25e6bc1759e70a26bf3a41ad6499cee613458802b373d2ba22bb2b28577eb163b5acc4ed6ac1e0f07b81d39823699317cf3a069cbab16b56534e424853f8906418cfadfd923c88eb83", @typed={0x9b, 0x77, 0x0, 0x0, @binary="dfde929ad1ef184668a091a1d3d8ab1eab2f03f9d3151b0cdaf0990b5cdada65e24f47d646cee4c90a7cddb8111c29a3ada6ede861501681915d3b20bebea50a3c652a80a33fbf3933d4dad26711f037c72a3fd88fb604905d2dd847cf0f86953841429e2bf530962af3e97ed89bc15353b429261cc7375c91c8f78aaec96a742153f89e379fbfc4054105cf9ef682ff266dae6c38ecb5"}, @typed={0x8, 0x40, 0x0, 0x0, @uid}, @nested={0x4, 0x71}]}, 0x59c}], 0x3, &(0x7f0000001100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee01}}}], 0xa8, 0x40004}, 0x800) [ 3366.612588] loop4: detected capacity change from 0 to 40 [ 3366.620994] loop1: detected capacity change from 0 to 40 [ 3366.625134] loop6: detected capacity change from 0 to 40 [ 3366.662101] loop7: detected capacity change from 0 to 40 [ 3366.664468] loop3: detected capacity change from 0 to 40 [ 3366.706632] syz-executor.4: attempt to access beyond end of device [ 3366.706632] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.707662] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3366.718919] syz-executor.1: attempt to access beyond end of device [ 3366.718919] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.720038] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3366.734125] syz-executor.7: attempt to access beyond end of device [ 3366.734125] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.735246] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:26:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = accept4(r1, &(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @remote, @bcast, @rose, @null, @rose]}, &(0x7f0000000240)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000400)={0x0, @aes256, 0x0, @desc4}) openat(r0, &(0x7f00000003c0)='./file0\x00', 0x500, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) [ 3366.753170] syz-executor.4: attempt to access beyond end of device [ 3366.753170] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.754136] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:26:20 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3366.768826] syz-executor.1: attempt to access beyond end of device [ 3366.768826] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.769774] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3366.771879] syz-executor.3: attempt to access beyond end of device [ 3366.771879] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3366.773116] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:26:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x6c000000, &(0x7f0000000a40)={[{@gid}]}) [ 3366.828548] loop6: detected capacity change from 0 to 40 04:26:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)={{0x108, 0x4, 0x40, 0x2b5, 0x1bb, 0x7f, 0x85, 0x80200}, "8d250568915d9514ab9c351e216632b6bf6f0391228c52e33a7986ffa794c12d4cc5ac1d981cd92325704c43472ef3f402a338fdbf483c4f2ee6e4fdaa671d4414ced0f8c97c4b33786c9a8669182f810cd6b3cc37161c17ef8a15e570a62b0052d711c34aa5f1959899ca126a3aa44f64955c24b6e0049a86170dee5ab60ae0843dd5e008dbd2f32c1163721929dec05f1f0bcdfcd281409ee3ea68ccab005c3bec989f24b430f321cb7ae43d895c914e7a516bd6545b1a7d43d71d64aff366e0ddd11d18", ['\x00', '\x00']}, 0x2e5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:26:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1/file0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:20 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3366.955209] loop4: detected capacity change from 0 to 40 [ 3366.960246] loop1: detected capacity change from 0 to 40 [ 3366.974106] loop7: detected capacity change from 0 to 40 04:26:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x8, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = creat(&(0x7f0000000340)='./file2\x00', 0x2e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000d7f8df379f58a4e7874e50a60b1c000000000000000000000000000000000000000001940400000000001c00", @ANYRES32=r6], 0x58}}], 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@private1, 0x4e21, 0x2, 0x4e21, 0x800, 0x2, 0xa0, 0x80, 0x57, r6, 0xee01}, {0xffff, 0xaf, 0x80000001, 0x0, 0xb90, 0x6, 0x4, 0x1}, {0x6, 0x1, 0xffffffff80000001, 0x400}, 0x6, 0x6e6bbe, 0x2, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x4d6, 0x6c}, 0xa, @in=@empty, 0x3504, 0x3, 0x0, 0x0, 0x7e9b, 0x9, 0x5}}, 0xe8) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000480)=0x6) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mount_setattr(r7, &(0x7f00000004c0)='./file0/file0\x00', 0x100, &(0x7f0000000500)={0x80, 0x1000ff, 0xb73d72aa77f57490}, 0x20) [ 3367.030224] loop3: detected capacity change from 0 to 40 04:26:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x74000000, &(0x7f0000000a40)={[{@gid}]}) [ 3367.061687] syz-executor.6: attempt to access beyond end of device [ 3367.061687] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3367.061681] syz-executor.7: attempt to access beyond end of device [ 3367.061681] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3367.062790] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3367.065682] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3367.088128] syz-executor.4: attempt to access beyond end of device [ 3367.088128] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3367.089362] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3367.146857] syz-executor.1: attempt to access beyond end of device [ 3367.146857] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3367.148010] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:26:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:34 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xbf, 0x6, 0x9, 0x8, 0x0, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000003c0), 0x6}, 0x206d, 0x3, 0x2, 0x7, 0x1, 0x8, 0x4, 0x0, 0x8000, 0x0, 0xc00000000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x10000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0x4040002, &(0x7f0000000340)={[{@huge_never}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x36]}}, {@huge_always}, {@huge_within_size}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@seclabel}, {@audit}, {@fowner_lt={'fowner<', r4}}]}) r5 = syz_open_procfs(0x0, 0x0) fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 04:26:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/fscreate\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) mknodat(r2, &(0x7f0000000140)='./file2\x00', 0x32, 0x3) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syncfs(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) sendfile(r3, r1, &(0x7f0000000240)=0x7, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x7a000000, &(0x7f0000000a40)={[{@gid}]}) 04:26:34 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {r8, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:26:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2b1c6d6b646f7366d8a42b00080101000440002000f801", 0x17}, {0x0, 0x33, 0x2800}], 0x80800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) sendfile(r3, r4, &(0x7f0000000180)=0x2, 0x4) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x250000, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3380.505025] loop7: detected capacity change from 0 to 264192 [ 3380.515342] loop3: detected capacity change from 0 to 40 [ 3380.516300] loop1: detected capacity change from 0 to 40 [ 3380.525918] loop4: detected capacity change from 0 to 40 04:26:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1/file0\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3380.639732] loop6: detected capacity change from 0 to 40 [ 3380.667764] bio_check_eod: 2 callbacks suppressed [ 3380.667777] syz-executor.3: attempt to access beyond end of device [ 3380.667777] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3380.669257] buffer_io_error: 2 callbacks suppressed [ 3380.669266] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:26:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x8cffffff, &(0x7f0000000a40)={[{@gid}]}) [ 3380.714716] syz-executor.3: attempt to access beyond end of device [ 3380.714716] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3380.715971] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:26:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000340)='io.pressure\x00', 0x2, 0x0) tee(r0, r2, 0x8001, 0x9) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3380.818808] syz-executor.6: attempt to access beyond end of device [ 3380.818808] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3380.820173] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3380.832381] loop4: detected capacity change from 0 to 40 04:26:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16=0x0]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x410042, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000140)='./file2\x00', 0x408001, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="70f4d1c061a0eb64442c63a890fe50a002236d3a83bcef13353e9e8d94ed98a9ae8d8e4c86e3cc0f602d3bbcda3cd9f45c50f762d2c3585e6b4b", 0x3a}, {&(0x7f00000003c0)="ce9d40117c3a348695029dff1c4e00bee8ec79315479c2213d8f7f96371405ae4fbb013bb8ae268b0171531459d1185093013dcdf45068ca9731cf13586cde80d4732b7054323517ceb8dea79ae2ce5b1bb2", 0x52}], 0x2, 0x6, 0x0, 0x671848f572867331) ioctl$int_out(r4, 0x5462, &(0x7f0000000300)) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:26:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x5}]}, 0xc, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3380.985305] syz-executor.4: attempt to access beyond end of device [ 3380.985305] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3380.987199] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3381.002271] loop1: detected capacity change from 0 to 40 04:26:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x97ffffff, &(0x7f0000000a40)={[{@gid}]}) [ 3381.030869] loop3: detected capacity change from 0 to 40 [ 3381.057973] FAT-fs (loop3): Unrecognized mount option "0x00000000000000000xffffffffffffffff" or missing value [ 3381.107589] syz-executor.1: attempt to access beyond end of device [ 3381.107589] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.108666] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3381.116109] loop3: detected capacity change from 0 to 40 [ 3381.138329] FAT-fs (loop3): Unrecognized mount option "0x00000000000000000xffffffffffffffff" or missing value [ 3381.152232] syz-executor.1: attempt to access beyond end of device [ 3381.152232] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3381.153217] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3381.338716] loop7: detected capacity change from 0 to 264192 [ 3394.720145] loop7: detected capacity change from 0 to 40 04:26:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x101}}, './file1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x109042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) fgetxattr(r0, &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000340)=""/248, 0xf8) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000440)={0x8, 0x4}) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x6, 0x8, &(0x7f0000000780)=[{&(0x7f0000000240)="b0a6ba5752a50b92b25b3d80e09cd47ddf7a95e46c41bfe9e16165132c283c20ffaa12d9f0c318c4c803a97a1ae159ed28c225db8b5f90413a3e3c2f3856ac", 0x3f, 0x9}, {&(0x7f0000000300)="4cd58fa11a501f494e21210168cd53af529d0cc9ae9ee8718e04b4c6156daeb03b870bd7d1a26b6b5250696614025b82844b679473cccf1657faa3aed902f9d2e55b598a852bbbfb74d1c357eb848f3a354fab5d49af119dc9188b6b1e3690855ed329e33171d824804722b8d78664ac679c95e16105b3d6c55d77c0a0052ae6da02dbe9", 0x84, 0x4}, {&(0x7f00000003c0)="1624281f53a214291af127117a1298979aebf2b5f9e88346b294eedd", 0x1c, 0x1}, {&(0x7f0000000400)="1fc900938f5ce7e30a3c4c637a71879409e04f438996c40817f323863c9bc2f04977ff1ce3ce5afa7b4c2c2db1f332a073a3f4854c547e2898413bc98f33351bea4428ad9b4b0279fb46b4ce1336f6b7a36835f2fbe2249767eeecbd8c87c7ede59a602f25018cfb26b46d5af7d29b0864988db7", 0x74, 0x80000000}, {&(0x7f0000000480)="edad32e7e5dbc238fd6e8cb53e6586aac1861958c798e3e7630f53b39c475114bf751a7e038d88b31b1bacfd58925fdb0d87358dcf91d6df7a2174c50307f6e4f8b5b918a400d4071b45f19f02d6318fd5a5330f1d4d11220748d37f01c5488e91d9ad5447109c70f3465679d815b79f7b73d2b115ff1ba0b031188b530ccdb06ad448fe3b09da3b1bf56fe8c36df7bfd237d3f6f5f0e459fdfc9b19079b3c6f1fc30fc452cd88c7522d8b35e3c2de9aaf4e503f5caa03f561a75cc7cf93eaf5b213717af48477c3f86133fe50d0e58a05403238cf", 0xd5, 0x1}, {&(0x7f0000000580)="ed4304f029be791c33e2cbb0acea5b2e9d6347df1a93f12c138b63816d97fa314cd58cb7074923816e19991ed06d9d549cbde7c69ef600a9a3c5e177896e0f2b8d49d09d1179e908d321239248aa5fd8df223876009ecbd91c29ce6c3af64c79b46144dadbe4e06d9d9f8d180ae55407bbbdf966636a532c0cacd8bdb05cf1534097a4d700b59469b4a695d418e9d7fb69f76894d38039a26a27f61f0152edaad80f8bff020de764ab78ea6042b6556c9738cfa064ce5c0f32bd6d8ccd94690b8fb097589b7f5d9186c5bb02af72df6513fc0f24edf69f55a97260403b1ebdcbdef4bfd76da3e2", 0xe7, 0x80000001}, {&(0x7f0000000680)="2a85e0a4c86b6278cb2a58e73f9636bd296f067a60fb3863eee0e1ee59316ce6615fca99f90a0ebda6caa7d4c79f0de26a3825372992920d10e1e55efcbac327e33f072d2aaa3da9cdc397c2b711a866e3d0f203b1e21ead45efc85a73cf22dd3fc44087417aaedb", 0x68, 0xffffffff}, {&(0x7f0000000700)="67ea265c9afffaff1db6c992ef63a77086fc4c3e737197a0a942d27a3d8267dca86b2c4d48451564091a6572efc178fe021dbd2fc84e785018b5e987b530280f296d8212d70dc2568542a21d59e54d86e597c08dd29ebd44259a5e2646be4c5090ed88b9", 0x64, 0x5}], 0x10c00, &(0x7f0000000840)={[{@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x2d, 0x36, 0x25, 0x37, 0x30, 0x74]}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x35, 0x3a]}}}}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@subj_user={'subj_user', 0x3d, '\\:@]\\'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x31, 0x63, 0x35, 0x66, 0x36, 0x32, 0x62], 0x2d, [0x30, 0x5, 0x32, 0x32], 0x2d, [0x31, 0x62, 0x64, 0x32], 0x2d, [0x38, 0x31, 0x66, 0x32], 0x2d, [0x33, 0x66, 0x66, 0x32, 0x65, 0x30, 0x64, 0x61]}}}]}) 04:26:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {r8, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:26:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x2, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="1169a248a56f019dede8fc432fd91014ea062beb84159cd1e555d377457554c7bd0c9c595c8d3860fea3c63e394607844b90f334eb6e7ae559a70f4e6fb4e63239651ceb6dda905456e3a85b47a5de1d03938ed3503fbeaa7afc216ab542c8cc289a340e8b4d4cbc14a2e4123db78adbe5c3a1989b6d538ab3eaa507555809fb882ec5493c68cb7d6f0229f80ba6d254c56fd0b8abfea5308eb35d99ce7966d3214777aa434a43a81319d2a3fdd051651c5ac74350f24dba0bf260dac0c46297ec7401e8148abb423333261fd08d48e8e0cecfa5aebdc41de88528984d", 0xdd, 0xfffffffffffffff9}], 0x82, &(0x7f0000000440)={[{@unhide}, {@check_strict}, {@nojoliet}], [{@euid_lt={'euid<', 0xee00}}]}) openat(r1, &(0x7f0000000480)='./file2\x00', 0x140, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:26:48 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xc0ed0000, &(0x7f0000000a40)={[{@gid}]}) 04:26:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3, 0x7, 0x0, 0x37, 0x0, 0x5, 0x2002, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000340), 0x6}, 0x8001, 0x1, 0x1, 0x0, 0x1, 0x2, 0x3, 0x0, 0xffffffff, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xd) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x80, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeab}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x12}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc8c4}, 0x84) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3394.764565] loop1: detected capacity change from 0 to 40 [ 3394.778179] loop4: detected capacity change from 0 to 40 [ 3394.789895] syz-executor.7: attempt to access beyond end of device [ 3394.789895] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3394.791019] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3394.791376] loop3: detected capacity change from 0 to 40 [ 3394.800053] loop6: detected capacity change from 0 to 40 04:26:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3394.874064] syz-executor.4: attempt to access beyond end of device [ 3394.874064] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3394.875119] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:26:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x103082, 0x12) fdatasync(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x40042, 0x102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000300)="c1ed0216cbad5e432ce110e479e15d3f3d43bbc5ea777c70bcd0623443df94c308d0a3e0590741e7c9616a8022c359b95942629bc9d5746ac5b9a6f6e1e1538ea38dc1f81ef00b2d0f4b91fc0e6c3f22ec307c98488b1a9c7ca754f0b86444c9f679d3ef31c5badb1e4be5260b6aec7d7d113b5700cd58572fe368a3f1a3188cf24d2e7d634d1a8f8c0be1465de146d410df3d48edaaba34895a60372e1a7a8e98e44d0187413615c8207d", 0xab}, 0x68) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200400, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3394.953111] syz-executor.1: attempt to access beyond end of device [ 3394.953111] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3394.954998] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:26:48 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) socket$unix(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xab) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200004, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc) [ 3395.013091] syz-executor.3: attempt to access beyond end of device [ 3395.013091] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.015367] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:26:48 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xd7d139d9, &(0x7f0000000a40)={[{@gid}]}) 04:26:48 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x8a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000900)='./file1\x00', 0x3, 0x2, &(0x7f0000000940)=[{&(0x7f0000000a80)="5503df9f45a541b31246450f44c805bf83d3aefd70005f70430b4c16d33574226f8b9711b96ce93ea8d786464ca55290ce29b18d6ead56d6141da71bf9684bf0d794eee9127f5cf3d74a5015f69dc19d2bca7b223955752a22b1842ee732021328cb523f747c51d993b87b83b60105d70928c32ce35adcdd6e39952f6714e20368546fa654a30345835c3beed03b6f11c967a96a43f1a57f7ca2de5ace66b7104afaf1127684b039f6f64c9fd7d24cf47ddb48142042251e219508b2e783a6cdac9983231bc1e2c931836fa91dcf0b4bf4071cd070f96cc252359495322086c6002438caa30ffa6b066438130b165dbee65c022f4e1d60778c697439ec28d4bbf734f14e37a3a2d5b0f75a4c9586ec16d003192c17c041976342ca960e559920dcb8ce3341bc2d5ba1ff3fb0a1934570789d1b024959704905970b57236519f7b4ae6d6b68944e69ff4944d631d665362e73958a53c63f0b1b0f8336ac4937842de586c88c863e0ce8bae1f16ab071a9e588586c7c1048941406a66529613295fdc96395cbe65ced8a9b69a1f21d43246ec1b5e92a213205645ab6d106700f30794e0ce4219751e85279f3835abd1c6cc8e4934e3d8d9b70aa3e1d0eb441fb99026a7c5159fc01cf8ebd66d4cdb6e0bc70a2046406cdd169221300bb2159e40d3c250702f8018dde9c8d935d931d4c9e1b29c40abcb68bf5ee902207e7c125454e4f1ea8333c029fd78587135b64f9636b4257c15a4bc96c65fdd0bd68ebee1fd8597cb4595f445d978914fc278657622e62a2e8fee5fb2867f5872a19f3cb2b163b61dcef69171c2f5b8cdf738210376b45e4f132845d4856b9c2927c4cf1ba390d13da2f947a5252611fc8ffb208bb57dce2f6c9ecf7811834d1b527dfd3e0347d9a11d8664ff16b9b4df20a7bf201beaf57d14322bd710b32b762093e0d1ab95cabc86987150a4fb46fad6fc80d3afbf471463a96c27399d6a8dbb55cd144371b2407cb8e662f2826c2d410ba1805c2c5975fab36d96f0824eccde8b0b94811df485808091254c65d02d1f6916aad75e5904bf49e800a817be762c44b2d97990d3b3b8f6cef82ec3a30f9d934b5a22196633feb595a2435df376e970131a6fdee6572823d14fbf0d4a7ed8d7336e227f529ecaec62297922b1e461cae4c5886672c46f7f850028da009924077b1b187186baffa50e0a485a3947807473d076b5d941c95d45a0d40b10657186963c2bd52392a9b712cde941df72d1e98d2e574251024b3f748988157e572486c4f4c7d4f7fe46a48af548977f370572473a6af2c1ac066928bbcba4f08e8396e743c8d4ee6fe8fa892301ad3eb1cf6a64c3b1f82bdfecd79a3aa2e7bc8128b2605b6cd9087a11813237b35ce8beb36434f16cf255b62460823640b72c6dfeb2cd4280ac7c9727a3b0e76af7c2f084105c2e3fc81cab1e24587d28474fe4220e0b8f67c2c5b78c82adc9ac00a49e43ad5cdb70c9de7bc3bed28e9e19bb3052477bea24801536b3f53a7360ff090c946728173072ef722ee3ba4be242589b164694d68814b71e8fc83ee3e92afa7f15465bdff00a6c19fecfdefb8290cb7f0dc01aba849c21eef675e41bf0b106e6e4307883c1c39069389dfcec467a8191fb475fb0047160d0e0aae1faf8e0981ff6613986587df2c6f4d8264deaf155666f3675bdfeb941e4c44c3dbe2767ce185352b28ae49a029169309fbe591399beacffe62a317027886eac4fabbdfff30eff15e063a3468a2600767058f1682c1966728440ec526f69e8403792f96c3d4cf1ef8468e85b58f33f98f455d2b1e299ed04e40bdd86ec80548a4b921a92c4fb39ef125f011a13426072e5904c083df599e53db8f7da3fd93f2145d310ece689cb5dec0cf82905a5b7452a86d9311c1865ab11ff6589879ebc16e46253a0b874dfd9200e775bc860055ec05db79c2a981260908de9664e5acf847212597607b4ef10ea7a897af35a02c7b593194b2fefbe27ae9af324626b459ac7661f085ef36ce01cd8267745c05075ab1ad50989bc27618c51f7ef38e26bf2e26ea82448e5eae306fc63c80b0b3219fd11b937cd3faee99ede60083cbc488c0e88f028967b982a2e4d6c828262c7d335c7c13c571785c40aa8489b34c0da8b7bb8e060af319badacff43adfe65c300fc0337e9eab0e3e9335d4dc6bb41fdb8cbf5f30163b1f451c895f3f956c957eeb4fe79c713edbdaa4a8f38099424c3a2ba98ed34c6e169cee69aab5d805439b167868a3d4ad53c98a07ca964c03d49783c957e9c31a028c1c941c7823495c314841ca9a384da72eb5887d14d1354e2a3186c6e5c2a7e457f4c1147b7e21209a213103c04b66a0c5afb0f0aaea1a75f4d3b26821247b456d63edf1de296915f0fe6b9a867937549f1b694ecdd95d5988f599435df789f0283418c6c63f927b24afe64ff739346b6059d9b9885a6f1711625edc2c01eb160177d60a20071755a456844f381ca91c2f7ea22becd63631db9de2eb8594c4d88cf4a63263b5239a8f0d956ba45d70e68116babb88592c2b200bf137af6023e13967417e7506824729d6715199cc000b1ea7c0a162b81c575a79a72ee6cc61303ae0dfdc5b22f949b43fbac01095e2d63fe0fc2ed0ab778a4715460f2b78a4cc4c0f188c80267ffd63dde1f4761361ea51cdd96c8a40289101ea69eaf7eaecec9954a59a1e48f83d7d84364749c51c453732843eb879111435f7523fd129e81c7f867f338104468fc79d41467ae3abd6f68d5a468958152a833724a5a60ec735e6a002df0b53dab2458dd013060679b0f93012ae2aabec8bc245d47eb07387267a08027168befb9b936b93f38f2afdcd90eb26085047bc70011ab774d42852771dfc000aa049db3e8c8c4b338321573bf052142425f2dce2c8b6f818b032bc1e17f1dcf63b390c4dcaf12785b3835b117b274e420240cb0a07116674da018583ad027d88c989e49a8ab7f5baf35845be71e5656890a72fa2016fcec1ca03ae9db10ed4370eb707a89a0849c5add786e35f81e4f5f835455b8a223d110ab232a607da2d1902f7d6a77d50d1055c35c6c691414726336095326826120a93b7dbb833a1dd3917bebdad2aae5ff6147f7cb1a78651157f85d8de1291f52a0994e538f28baad269d2b44772c502bedef4b6f5ea6f1d16b141a204e4cc53b6d5adebd1a4bb458e2c4bcc86acf34895ca17144dd62bf8ac5b8333f06f45d4b5170a706b317edd0532b95cad6f6cb53eee0c7df292874bcde4fea2633325cfa82a0d117f6f0818da64b86e0192af06f051e49e1c78f1ab6550aa511eaf28ce53869e9a5d8952316e4919956f618b609f90831db4014f2e6a5e00babf376da27b4fb830d1b31717c91eb342bfb096db721f3be930b36bc95d903ae227b48c3ff925d1b9c04ba00059fc7a7c6e32fc73d7de0bbd504dc87c8fd11e4f3020247fb8d2bd6600a7701da3482daa497222e7229f768e1a9930d0ade48f4804c371bd8b6eb94bc9c0c013d13bfe823bbbf3856c3d6a7f3606ccf835139264b531dcaff9a9cae04f4990093b5fa97e20881b139d7bf1f3220328fafd083e5f027dfe331abeb23393d3555e7ab0a213fa8db08b4e98c3e167f98bc4665d48e4dfe593125b4db541639395665621beb1e8f00438d5afa4be0bb082b7428651433046662eb763d90b18257a6213234c46e489431b5d7e846c2b49af5a82b5068a978a190035c8e3fb3bb1025aceb33a3e464b83a0269ca6f42123c83c3dbcfb960a75a9af8ba5db5901218f6105969c87ac19db11f37c81e335e799e2039ac885847f98704ed8638e6a53ca514518b6b8d9e715df7310177cd7e50dd9ad4b78d0abb941e4b1264e133f286d67de65ec37e20d0c366b63f59caa4ba5b50b0681590d5ef805901e7010871133e5fa2cea39e10603e20b2f6f91729191b63d9cf4dce6479b26a65556aa27c4e06211bcc5ec8ab0ddf548993a63db1a246bddff8980268c83db94e37efcd3f2a35e2d39118f57a5e752f04f03ab2cd3b0ac1798c4c396b444ba0e839a7562c7f511e48e52d8ef248ffbf8ce7727e2431d27be97563cb5295df83368eeef9da926b48d3c11b4fa034058ee4245d58ec2fdcf3ecd559d726c1b2bcb34ae2663293ca2a0f62afc28ba7b99007043f8d2f2ccf5b2afe7ba37d5e72e989217de6c8719072c1d2f38e710e03800d2f61890ba8134af46d375f0478a902f2b41e92feffdd7f7618d37804294b403ed107fc6aaf2cbf7194714ec6e4d055c3c1db5e74b4bffb28683ef8b09d2cfe39bdbc15d4f8dc2b7197b1b590685bbb5c9956f39e2af34fe6b463e4f092ebdc61ce3714357948e46a004caaffb6e696301e504249b2df6a7db82c53b1911ef19ff62b502a0ebd872c09ec7c03354e0fbbb3053f4bcddec0cc116e44cb1c7e1350076bc798bc1f31922ed5456ee57aabaab020bfa37a197d860aa51ca66b5ac91f74956e9296d8d11d520f1998e169ba5a383a968232854f1fd7e3d8e76a4f1da6ff2b9d6e6e17f29f2395b438fe932fdda7b5c1d4c55e018fff5cb437af145ac1cfe42271ce29cbc33a8c6c200101500e3cd31ca921550e8ea8519c173e7b12dd51f620cf72b3b93f2f797ac29f12059df4611a1560cf76193a1f42dc77f4082dd1f529d802e4f997a0b076f247921a8472a461428a0d3db6dd155036fe5f8cccc466d5546bb5d7f763bf2f790eee0e41530229ab1be72f433d8e6d7bb31d9cd599e8f4fc95138fd28358f23341fa20d890feac63586e5055df97fcdc416600f6b4da2e585721b89009dfd2be7d86d368caa9e815aedd2afde0e780534e39f43f40edd251fa37f9761e1d1dd4d414a8f0ff41d498c889bc72364779680e006eba94eaf7c19d040ecb6c014f2d330b37475e45580ccf7c50d7bca297fd38be20074015d9f3b7413786f3babf5a17324ad9b0c9ceb4ed06fd8cee7a2ca0358fe5745b95bf3c762541d3e87f785dc9fb3e5dbfb838b499acc31beee205227c3f2909dd818036e4cbfa7494ed8c915f617d299bc8cd9b7885a6cc8b3f2184f5c7af39e60ba00965d501aaee3c29c8dff14240db5755c531db3be0caebb348c44f1cdf494f7cd8d7cb58c3b47c45524c18e16ea0f86db9bc803be8018c198f604033ee94b6d3954f83dfe80785385537fcb2aa5db868594ba7186cf3eec065aa59e8a1afeeef515e83473b4a8be73739d47a128f9337853154a5b19261cebef3d5a49f1c5f6bd3465fa5b65ea25abeb61dcc21cfc436b5a06dc01029b0cc6b9b466b3eb325ee142bf10e8facf2017d77d458d0380fc9541d34c7423c10611ab4d051cf7f2f5c558dbe245f9bf8130e09ffea2dbee227f1c1b54519b7c156e2ace7a22d895d26a6cc8c3be6b1a32b03b5ac0cc0cf9f665584f65be9d159253ba5aa334d1dbe3a8bb54448e148f76f328655d5ec0d02a4d15e6453aa0c8a436843f2cea446fc26d878fb1a6b6a45ae525ac9ed11405354dda84de492d2f758cd564436b363cad0709ea617eca8887e51217ac4b682f6096da28d4aad0d57bc26b4b4b98701231cc41f139e8c1c1367df43a89b3ba3c98a0b388dc674c9b7f7aa54d6aa13fb848fcca8b127390a84a510a914be459db8b2c431a6a5755e4b8e9c24b71470fbfe1c9de758fdd9effc6f39e27ebf35e8ab3b8cf156feff772d555fb76c13a9ce1a61b38c06aae55f49f5453f5dc1410143b824df4a206aa70560111e78aa7f08b6b3b4f5c070a11af6ee99fdd43ef072e169e6132d53f", 0x1000, 0x7c8}, {&(0x7f0000001a80)="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", 0x1000, 0xfffffffffffffffd}], 0x1000c09, &(0x7f0000002a80)={[{@rodir}, {@shortname_mixed}, {@shortname_win95}, {@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@utf8}, {@rodir}, {@shortname_lower}], [{@appraise}, {@fsname={'fsname', 0x3d, '%\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt={'euid<', 0xee01}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]}) syncfs(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file1\x00'}) recvmsg$unix(r6, &(0x7f0000000980)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f00000008c0)=""/44, 0x2c}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/182, 0xb6}], 0x7, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x12060) listen(r5, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0xfffffdef) 04:26:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3395.255170] loop4: detected capacity change from 0 to 40 04:26:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file1\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 04:26:49 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:26:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) acct(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3395.378087] audit: type=1400 audit(1659760009.109:10): avc: denied { tracepoint } for pid=13467 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 3395.431714] loop3: detected capacity change from 0 to 40 [ 3395.477159] syz-executor.4: attempt to access beyond end of device [ 3395.477159] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.478375] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3395.494140] loop1: detected capacity change from 0 to 40 [ 3395.559208] syz-executor.4: attempt to access beyond end of device [ 3395.559208] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.561869] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3395.693212] syz-executor.3: attempt to access beyond end of device [ 3395.693212] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.695652] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3395.780837] syz-executor.1: attempt to access beyond end of device [ 3395.780837] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.782830] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3395.843740] Process accounting resumed [ 3395.861701] syz-executor.1: attempt to access beyond end of device [ 3395.861701] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3395.863806] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3395.874198] syz-executor.1: attempt to access beyond end of device [ 3395.874198] loop1: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 3395.910199] loop7: detected capacity change from 0 to 40 [ 3395.935328] FAT-fs (loop7): Unrecognized mount option "net/tcp" or missing value [ 3395.954954] Process accounting resumed [ 3395.983046] loop7: detected capacity change from 0 to 16383 04:27:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xd939d1d7, &(0x7f0000000a40)={[{@gid}]}) 04:27:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:06 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {r8, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:27:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 04:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x102) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x8}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fcntl$setlease(r0, 0x400, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:27:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3412.438541] loop3: detected capacity change from 0 to 40 [ 3412.439044] loop6: detected capacity change from 0 to 40 [ 3412.440687] loop4: detected capacity change from 0 to 264192 [ 3412.456496] FAT-fs (loop4): invalid media value (0x01) [ 3412.456929] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3412.467152] loop1: detected capacity change from 0 to 40 [ 3412.469888] loop7: detected capacity change from 0 to 40 04:27:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xf6ffffff, &(0x7f0000000a40)={[{@gid}]}) 04:27:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x802, &(0x7f0000000140)=ANY=[@ANYRESHEX]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair(0xb, 0x4, 0x8000, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r0, r2, 0x0, 0x9) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3412.587094] bio_check_eod: 1 callbacks suppressed [ 3412.587108] syz-executor.3: attempt to access beyond end of device [ 3412.587108] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3412.588667] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000081}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x10}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x200c0001) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3412.703317] loop1: detected capacity change from 0 to 40 04:27:06 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {r8, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:27:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x50b242, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], 0xfffffffffffffe25) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept$inet(r0, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f00000005c0)=0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000640)={0x1, 0x7, 0x21, &(0x7f0000000600)=""/33}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000140)="1d2e69db1ff9667e4193595c6823da10375e7a8f72769e8e8501138b56", 0x1d}, {&(0x7f0000000240)="f68c38a461c18025cf1668bbe9e955b49109a3fd5740cc", 0x17}, {&(0x7f0000000300)="82cc1f8e3d8cbcf1590f5b2e82f6cb80f29e37d2d9d67ec87a4a1b5f15829761d5bf57", 0x23}, {&(0x7f0000000340)="89c117fb4aa9f53b790b7aa88b5d30e734366d30446ca10f6fb86e3ec8fd357949accaa0b1d458aef277b286e0a7397d062950fa", 0x34}, {&(0x7f0000000380)="7ded41350deb41423bc2a81f4117301a5ca63788455781efa1383f7dfee7fc761bb60db19a97c2a4b502d310cb3af6415d398a04ab77", 0x36}, {&(0x7f00000003c0)="4302c873ddd7f239b041d6953e2975890ee9c8324e5608ea631ae2a26a5ff138e17582f77789163663cd5fa46e8a012fed6c76effe60454d3b6071c06f11a9c728901e755d55da487a8ee7163a7a38502a8a69d7481b2726d3e19906b3ed7cbfd1537b6dfedc89bc1a26", 0x6a}, {&(0x7f0000000440)="c982f8ddaef32eec47c988757462a77254f5fc5b3ecaa822926814bd4dcba6ffd868c3cc9e21dae87ca709656bd2bccb84", 0x31}, {&(0x7f0000000480)="948556a876266f6c840acaef52a8728e680ea2a720cd21fe8198418e6ed3e855478eaacd4d712e1c2e4cb4e144bbe132d13b2b83d5ed6e0acb4448ecdaba02fe82a79deb84e0903f768d32ed1edb170d1e42e128cbf37f8cb6ecfeda66d67842e5c8b9757e607450067d30", 0x6b}], 0x8, 0x9, 0x97, 0xa) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3412.876892] syz-executor.1: attempt to access beyond end of device [ 3412.876892] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3412.878110] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3412.886376] loop7: detected capacity change from 0 to 40 04:27:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xf9fdffff, &(0x7f0000000a40)={[{@gid}]}) [ 3412.987202] loop6: detected capacity change from 0 to 40 [ 3413.038639] loop3: detected capacity change from 0 to 40 [ 3413.104591] syz-executor.7: attempt to access beyond end of device [ 3413.104591] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3413.105859] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3413.289312] loop4: detected capacity change from 0 to 264192 [ 3413.329292] FAT-fs (loop4): invalid media value (0x01) [ 3413.330358] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3427.045851] loop3: detected capacity change from 0 to 40 [ 3427.051296] loop1: detected capacity change from 0 to 40 04:27:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfcfdffff, &(0x7f0000000a40)={[{@gid}]}) 04:27:20 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xfc, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x380e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x200000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file1\x00') openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x220d80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/igmp\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) pwrite64(r2, &(0x7f0000000300)="34739aaa39b38e1511d62ceb611acaa5b413b1e6f7efea3ba53cca768a6c2c570b8f1715132e3fee9124ab93093531266638edbca1995ca318fd27dcbd661286abb515e6a0413e00e604e91e087cf18dc3866bfb30379fc491d1f4f0efc38d6c6354f41771abd71d5594d3b273539e7e7cb2cbfde6e9e58e", 0x78, 0x3ff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x2200, 0x21) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x105a80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000240)=0x105, 0x740) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) getsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 04:27:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {r8, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:27:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x20b6031, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x305343, 0x12a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000240)='./file0\x00', 0x8000, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x309040, 0x20) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x2, 0x0, 0x3, 0x0, 0x1, 0x8805, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x3}, 0x220, 0xfffffffffffffff8, 0x202, 0x7, 0x100000000, 0x2, 0x1, 0x0, 0x3f, 0x0, 0x100000001}, 0xffffffffffffffff, 0x7, r5, 0xa) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3427.083991] loop4: detected capacity change from 0 to 40 [ 3427.097720] loop6: detected capacity change from 0 to 40 [ 3427.101180] loop7: detected capacity change from 0 to 40 04:27:20 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfdfdffff, &(0x7f0000000a40)={[{@gid}]}) [ 3427.135888] loop1: detected capacity change from 0 to 40 [ 3427.162715] syz-executor.3: attempt to access beyond end of device [ 3427.162715] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3427.163979] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3427.210120] syz-executor.3: attempt to access beyond end of device [ 3427.210120] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3427.211366] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3427.257959] syz-executor.7: attempt to access beyond end of device [ 3427.257959] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3427.259227] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:27:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x10000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f884", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000800)={{0x10b, 0xff, 0xff, 0x7, 0x17b, 0x3, 0x171, 0x7}, "24fc34d063c84b29042b5167b0f8a78e717bbe26bebc8931ae1f99629835e52b3071a2042db7db15aec4d49b40ddac2d198e71b28c45a17c47a85e9d98d7d9f1efb38c2c711d5ce6232179e7a23d627cd616e3713c42b071542476ad6b37b2ecf0de1d2a77b37100c5f460febaba65988b69e86867a872ed9a0841aae5c59e8f452b559fdc39095928d4130b8a76af1fe7612a4faf69fe7b14396a679b73adb0192592e9d5d6575778a361bea043a31dce85875b04b0050144d816cf8b858fae40791b66e066e0c3a2a6b47b478a9ea758e02acc069de789878170d5957a75517c401cd6e4788f6cbf7037067415", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x70e) openat$hpet(0xffffffffffffff9c, &(0x7f0000000f40), 0x800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x20, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000300)="7bb4e584fffe79217e7a1d2d8f25b324fcb9b9b34b4d15a5de2c0b40538ed036898e705fd1d3599ddcb51f56079bc349a6ec04ed5aba6b05fe9e60bf5f8cee245ff3469c043a1388267f79a686f4c9bc665aa2a33ea3758fbd7e42cbcf2b68e6b87ef96d550f9ee61ca369635ee9360a1e90b625cba4d220", 0x78, 0x9}, {&(0x7f0000000380)="841bc4174eefbd467dcb955b0e88ae84c69c21ba2205d77ba1735c655ff4315946bbb74cf7bc474175f4a6453fb574229207f19b1d345f86e31e85f2260981673a21bb1222edff7099", 0x49, 0x9}, {&(0x7f0000000240)="d48cc9544db77e0e7cac9ac149751a757b5ddd4d35b27b4a2c4f9999e70a91a32a1bfa586944", 0x26, 0xabc}, {&(0x7f0000000400)="920fcf428fc34dd78fbbe95f25", 0xd, 0xfffffffffffff9c7}, {&(0x7f0000000440)="da0f1456d28c29fbfbc5e956ffcbb89fbe0918fb71119fd243a300e5f81d47afe3453c1043a7452042a3907c79dde85831626a53c37f79a0fa1faeec18a475fb9f8b046e9d0d9f4b9e66195fac60353408f55011cba3018a3a5b5883bca1ca13532b7465d03eb445de2a945a86397189fd8f4e53443417d843c1376d6c8b4e51e9ff2f4bfcdb8df09bd5713993b92dde60d0ad59c1112fefc2", 0x99, 0x1}, {&(0x7f0000000500)="8130455539933d", 0x7}, {&(0x7f0000000540)="eeb3d0c297cf5bacc306f75039ce7a4732230608403a1049626db9ea8e35e5973c8f64fe21c5b5b9d34ae2c0a1ae517ffee3d306b36955dea618e48404ac782de9f8ec2b48985807556718194a5a2313fb37dab20f4e81be286e89478ce28708fa831bc9198d7f20536d33d1825614f664955e177171f7575065813683a969c594eeb5946c15afee518d03876e50cf2ccfa405c5d6ea68d877f11bae0432ec161e97791aa831fdc3c0c347571fcdaaf976db13340090645a743714c9ccb75490fa67f0094aca6d6b02feeccb2e81b540a576879cef0db3d1233c383708d471a79ed6776878d6d2f1a44a57f5771577362ebd9cde", 0xf4, 0xff}, {&(0x7f0000000640)="be34a6663a232599a9b322c947583f8207395cc70e40f2e6208704f54721bb6787bd388db0ef9b644fc2bfce2809daa5b13abd13dd02c0", 0x37, 0x7f}, {&(0x7f0000000680)="996a98c173d7794cf31eca0139", 0xd, 0x100000001}], 0x2000022, &(0x7f00000007c0)={[{'vfat\x00'}, {'vfat\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 3427.291267] syz-executor.4: attempt to access beyond end of device [ 3427.291267] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3427.292600] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3427.346885] syz-executor.4: attempt to access beyond end of device [ 3427.346885] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3427.347994] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3427.371694] loop1: detected capacity change from 0 to 264192 [ 3427.422140] loop1: detected capacity change from 0 to 264192 [ 3428.228625] loop1: detected capacity change from 0 to 264192 [ 3428.239612] loop1: detected capacity change from 0 to 264192 [ 3442.511575] loop6: detected capacity change from 0 to 40 04:27:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfdffffff, &(0x7f0000000a40)={[{@gid}]}) 04:27:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') [ 3442.513176] loop7: detected capacity change from 0 to 40 syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f00000026c0)=[{&(0x7f0000000300)="299cf585d43ff4b44507397c326665e27344d145804db8", 0x17, 0x3f}, {&(0x7f0000000340)="4f443daf0ecd8386ba1a39aaac1c578b995884cfe08a9b51360f44c4157ef247e0c05a9bba1e19901d060f4e7a4f874ec9db6238fbf5b4fb0fdf20250c85798ece2d52ec038c5dd766adfc398a54208e60440f707ef1cb4ec3c86deb302b72971b62503a01d26dba71f9333686a6e3658832bc796c7a452c0ff181af4b541aa694b429d0e83a20bdae8c9dfb8ea1d7313f608b7c5ef17d467def0fa40d9b8a3528f9831643fe3457621d994a6c206a18aee3f1aa74e2ad57348b847ea2b82aeb6bc4ea2bb3e92bdcb93f99a3493a783e7cd18a378f2de4ae", 0xd8, 0x8}, {&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f0000001440)="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", 0x1000, 0xff}, {&(0x7f0000002440)="b654cc0cb73856984daf0308d44f6f79403e46b4bed757420f96c59e786f76de583c89d749295600279cd0994a718a9cc7e56bd452a7a1a6614f6bbb2c7881c5046ae1f00f1d43542c01979ad9f4d0eaa4188c8b47b19c161aeb139be37e", 0x5e, 0x8d9}, {&(0x7f00000024c0), 0x0, 0xd4}, {&(0x7f0000002500)="ef49e4e675c3a3a98cc4f66eab0353dc4918a6d0dd6b3ec14e5e3c9f57c505218801c58bf96c37e0ad62a30bb8ce396467b2ed5b62b5fde59e8459878a971fe9dd993e687c8efbf6dcc7d4946e0f6f3324c36c854b0f2ac73185c536dc2f41e8114dd4880b7b2d4a1f246052cfec8f7635a032590781793712ad012f75ce35c8a064cb18", 0x84, 0xfffffffffffffffc}, {&(0x7f00000025c0)="7fdafefee567013fbc87fb0cfde9113d8e9b0d04ad46df739455ff9f420670d04fa9e4836d4d069986e158d95f24e5470b04570f5ceb990489a4b7f6f69ffdc31a0f25d3723d8f6c8ba6790b4653fe77a2eb541504adf0f20713b6b2de250252d64575e66cde01bd68c3fd27005777c50298cabdb84ad0a1b214effbc18ebd992b493222df5037f5b4e5c8c2a3bb256a3480c8cd62e8c87de022541f03098bc54a6396317505c5d9bccbe4f17310f2fe15f2eac2e70ea8b01f1a9c720e7d024ec4e95436ae5fd77550d3275a38e6ff82", 0xd0, 0x1f}], 0x800401, &(0x7f0000002780)={[{@size={'size', 0x3d, [0x30, 0x30, 0x31]}}, {@mode={'mode', 0x3d, 0x4}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x5283, 0x7, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:etc_runtime_t:s0\x00', 0x23, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:27:36 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x50dc42, 0x10e) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:27:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:36 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3442.515779] loop1: detected capacity change from 0 to 40 [ 3442.517859] loop4: detected capacity change from 0 to 40 [ 3442.533257] loop3: detected capacity change from 0 to 40 [ 3442.563986] syz-executor.1: attempt to access beyond end of device [ 3442.563986] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.565142] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3442.571796] syz-executor.4: attempt to access beyond end of device [ 3442.571796] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.572923] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:27:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x1, 0x80, 0x9, 0x0, 0x9, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0xa8ee}, 0x10000, 0x7, 0x7fff, 0x5, 0x0, 0x5, 0x1ecd, 0x0, 0x80000000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0/file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x6, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000500)="73ee22d671c2e0329a3453290796a62ffd0ae0d33ab1b5715b100371d091f216d89cd9293d5efdec1e90051d951b6d3f0edadacbfe1cb5eebfa1bc55983c5193b4ae61ab230fe67d4acd1cf9a2122a1e3807c2ec73f2b376eab1026de36706b1a1ff85ab26e540f051f84663c36beb2f568f9d75529a5c9a05611004faa56fbd8a3942fc854ea01aa1812d523cf9311189a33650efdc8547e0229d919e4eca70d43e97215f158b14ac3a2c2001a17fcc8ff86dd4424c938f2224351eff4670aa4a89badfecdc2095", 0xc8, 0x1}], 0x2000000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r2, &(0x7f0000000200)='./file0\x00', 0x400, 0x102) fdatasync(0xffffffffffffffff) r3 = geteuid() mount$9p_unix(&(0x7f0000000240)='./file2\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e737b4b2ec43d756e69782c6163636573733d636c696509002c6f6260420cb170653d7d21282d282c61707072616973652c6f626a5f757365723d76666174002c666f77", @ANYRESDEC=r3, @ANYBLOB="2c6673636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d5c242d2d2dcf24252c736d61636b66737472616e736d7574653d76666174002c686173682c00"]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) getpeername$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000140)=0x6e) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3442.712792] syz-executor.7: attempt to access beyond end of device [ 3442.712792] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.715026] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:27:36 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) [ 3442.742297] loop1: detected capacity change from 0 to 40 [ 3442.750345] loop4: detected capacity change from 0 to 40 04:27:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfeffffff, &(0x7f0000000a40)={[{@gid}]}) [ 3442.758534] FAT-fs (loop4): invalid media value (0x3a) [ 3442.759264] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3442.769143] syz-executor.3: attempt to access beyond end of device [ 3442.769143] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.771090] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3442.813912] syz-executor.7: attempt to access beyond end of device [ 3442.813912] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.815771] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:27:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {r7, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3442.862342] syz-executor.3: attempt to access beyond end of device [ 3442.862342] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3442.864132] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3442.978776] loop6: detected capacity change from 0 to 40 [ 3443.032960] syz-executor.1: attempt to access beyond end of device [ 3443.032960] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3443.035063] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:27:36 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRESDEC=r0, @ANYRES32=r3, @ANYRESHEX=r7, @ANYRESDEC], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:27:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xffff1f00, &(0x7f0000000a40)={[{@gid}]}) 04:27:36 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000300), 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/8, 0x8}], 0x2}}], 0x1, 0x101, &(0x7f0000000540)={r1, r2+60000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(0x0, 0x0) r6 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB='n/file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xee01, r6}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) [ 3443.230885] loop3: detected capacity change from 0 to 40 [ 3443.235283] loop7: detected capacity change from 0 to 40 [ 3443.314362] syz-executor.3: attempt to access beyond end of device [ 3443.314362] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3443.316550] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3443.337312] syz-executor.3: attempt to access beyond end of device [ 3443.337312] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3443.339003] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3443.371318] syz-executor.7: attempt to access beyond end of device [ 3443.371318] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3443.373239] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:27:37 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x230002, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {r6, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:27:37 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3f, 0x101, 0x3, 0x4, 0x7fff, 0xd4ffa8f}, {0x0, 0xfffffff7, 0xa167, 0x100000001, 0x9302, 0x332}], ['\x00', '\x00']}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x1, 0x4, &(0x7f0000000540)=[{&(0x7f0000000440)="ff8c40f66eaa70cac21efa97c86d27765004e83c52a26d7252856783bffa3085b3c8e723388fa5c6908420ef86b79f11cb67666d68dcdd40c35dc0b662b552e6c6b9217e8e89efc93c0c06d65aad6ec447c3eb12c414389b5f428bf540baab2c1aa5bb98ebf1fd179dd21ffc2f", 0x6d, 0x1000}, {&(0x7f0000000180), 0x0, 0x2}, {&(0x7f0000000240), 0x0, 0x1}, {&(0x7f00000004c0)="6012ac1bb7b2b8f3c2583c89a298d8d8cf153cae35f708d112af460dbeeb7b9b50636db6b9d9d8304a870509f9b59e9d446fbcc989e497104f6b97034bc5b6f00457c06a1c18353e4f124922729810701e791ed858388a30e16ea35b31e011647e32d9e8cb782c9eb539cca9e529103ee194e15383edaf4c1d8f4545586f", 0x7e, 0x1f}], 0x800, &(0x7f00000005c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x1e}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@rodir}, {@numtail}], [{@subj_role={'subj_role', 0x3d, '#$\'#'}}]}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x8000, 0x87) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3443.454358] loop6: detected capacity change from 0 to 40 [ 3443.556320] loop1: detected capacity change from 0 to 40 [ 3443.605270] loop4: detected capacity change from 0 to 40 [ 3443.618330] FAT-fs (loop4): Unrecognized mount option "n" or missing value 04:27:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffdf9, &(0x7f0000000a40)={[{@gid}]}) 04:27:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x39775996}}, './file1\x00'}) accept$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = eventfd(0x7) sendfile(r3, r6, &(0x7f00000000c0)=0x81, 0x100000000) 04:27:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x14186, 0x7, 0x4ec, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3457.380358] loop6: detected capacity change from 0 to 40 04:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file1\x00', 0x1, 0x128) 04:27:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121480, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x1800) 04:27:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:27:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3457.385466] loop3: detected capacity change from 0 to 40 [ 3457.388111] loop1: detected capacity change from 0 to 40 [ 3457.428456] loop7: detected capacity change from 0 to 40 [ 3457.428554] loop4: detected capacity change from 0 to 40 04:27:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x1800) [ 3457.483786] bio_check_eod: 2 callbacks suppressed [ 3457.483798] syz-executor.3: attempt to access beyond end of device [ 3457.483798] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.485254] buffer_io_error: 2 callbacks suppressed [ 3457.485262] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:27:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') ppoll(&(0x7f0000000140)=[{r2}, {r5, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3457.516220] syz-executor.1: attempt to access beyond end of device [ 3457.516220] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.517273] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3457.547735] syz-executor.7: attempt to access beyond end of device [ 3457.547735] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.548789] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3457.550219] loop6: detected capacity change from 0 to 40 [ 3457.565906] syz-executor.1: attempt to access beyond end of device [ 3457.565906] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.567621] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3457.585810] syz-executor.7: attempt to access beyond end of device [ 3457.585810] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.587531] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:27:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:27:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffdfc, &(0x7f0000000a40)={[{@gid}]}) [ 3457.663911] syz-executor.4: attempt to access beyond end of device [ 3457.663911] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.665820] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:27:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x1800) 04:27:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/120, 0x78}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000010040)=""/102397, 0x18ffd}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000000400)=""/161, 0xa1}], 0x9, 0x7fff, 0x80000000) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3457.725967] syz-executor.4: attempt to access beyond end of device [ 3457.725967] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.727859] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:27:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) [ 3457.781671] loop3: detected capacity change from 0 to 40 04:27:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3457.856728] syz-executor.3: attempt to access beyond end of device [ 3457.856728] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3457.857993] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3457.905804] loop6: detected capacity change from 0 to 40 04:27:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd11c2, 0x19f) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r2 = memfd_secret(0x0) r3 = signalfd(r0, &(0x7f0000000140)={[0x8]}, 0x8) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x800, 0x90) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file1\x00', 0x109) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 04:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3457.959315] loop7: detected capacity change from 0 to 40 04:27:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x1800) [ 3457.995030] loop4: detected capacity change from 0 to 40 [ 3458.007787] loop1: detected capacity change from 0 to 40 [ 3458.140566] syz-executor.4: attempt to access beyond end of device [ 3458.140566] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3458.142981] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3458.166598] loop3: detected capacity change from 0 to 40 [ 3458.272108] syz-executor.1: attempt to access beyond end of device [ 3458.272108] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3458.273980] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:28:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x8}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r0, &(0x7f0000000300)='./file0\x00', 0x10600, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4d6b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) openat(r3, &(0x7f0000000240)='./file0\x00', 0x121000, 0xa2) sendfile(r2, r1, 0x0, 0xfffffdef) 04:28:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffdfd, &(0x7f0000000a40)={[{@gid}]}) 04:28:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:07 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x104c0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 04:28:07 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) inotify_init() ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3474.269925] loop4: detected capacity change from 0 to 40 [ 3474.278877] loop7: detected capacity change from 0 to 40 04:28:07 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1800) 04:28:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fdatasync(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3474.291139] loop1: detected capacity change from 0 to 40 [ 3474.299168] FAT-fs (loop3): bogus number of reserved sectors [ 3474.300040] FAT-fs (loop3): Can't find a valid FAT filesystem 04:28:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xffffff7f, &(0x7f0000000a40)={[{@gid}]}) [ 3474.336735] loop6: detected capacity change from 0 to 40 [ 3474.369700] bio_check_eod: 2 callbacks suppressed [ 3474.369717] syz-executor.1: attempt to access beyond end of device [ 3474.369717] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3474.371178] buffer_io_error: 2 callbacks suppressed [ 3474.371186] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3474.397767] syz-executor.1: attempt to access beyond end of device [ 3474.397767] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3474.398736] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3474.420589] syz-executor.7: attempt to access beyond end of device [ 3474.420589] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3474.422297] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3475.138094] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 3491.662800] loop4: detected capacity change from 0 to 40 04:28:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xffffff8c, &(0x7f0000000a40)={[{@gid}]}) 04:28:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xee01, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:28:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:25 executing program 2: chdir(&(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x10000, 0x16b) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3491.674197] loop1: detected capacity change from 0 to 40 04:28:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000240)={{r4}, {@void, @max}}) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x3}, {0x2}, 0x44, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000300)="42c3d080ba937cd84b4b30c94bcaa34bda88c3542188b3251c37a8a00ee880c0f92344aaaa8811af5e1855ab3021f4927d7a07cf9cbf5e3b27d055453b80667191df6b03cdd0967ffd1e546bd43e50fc84440c7ed3ac35c638fc198c6f1cab8d48df22bbfc8ac3b20af4416b1a9598d45c8237725b4d45b315ff68723c3c7bab6c9ac58e539fa83e421a2c0f942ed5cf81", 0x91, 0x0, &(0x7f00000003c0)={0x2, 0xd2, {0x1, 0xc, 0xb5, "6d5f83c1016c54b0b4c390acf8dfc2a7a80175322a4e562e03a4dd82e6afe4be6f7092e3b1e3c8f136e28a4520ab4d701cdc2fd634d7bf0dda61db6a4013a4d0f6923d1a8463358c8dd9735ab502475e536c8421fdbd38322995ed776376e39073bd510539e20a6c0fa8a9c3635e644536a1183d62873583aab9f8d47d97e9db65f0ca339a91d511a324e29d025d3cc0d020abb7e6e12a508d5ee7e3888aea1c76fbb5666f0efc7f460c09ee24809c647f6931078f", 0x10, "58ad603b69f278aca5407a6d46039cbc"}, 0xa6, "a5904b7c097d320f54ab8d4e94d8448da3a658214fc1d61ed1a66a8b7ba9c109a16d2cbaf9156f93ee78015ff61fbb64704c4d345cab9218ba1cd8ec02c2b7fd98b8018bb35bb7f7d66f5c6df96677f9f901bfb3d0582d54c006b996a639837934676b9a9d1c309a56173e1d21acdb026f68038c552b7b3b33fc57df4252e20849c9cfcfb21efc036cb1a6806493a5c101f7233609338ce58c9605523a6c058c047114b74736"}, 0x184}) 04:28:25 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1800) 04:28:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffded) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(r2, &(0x7f0000000040)='./file0\x00', 0x248000, 0x41) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3491.716555] loop7: detected capacity change from 0 to 40 [ 3491.742558] syz-executor.1: attempt to access beyond end of device [ 3491.742558] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3491.743254] loop3: detected capacity change from 0 to 40 [ 3491.743599] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3491.745513] syz-executor.4: attempt to access beyond end of device [ 3491.745513] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3491.746559] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3491.763273] loop6: detected capacity change from 0 to 40 04:28:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xffffff97, &(0x7f0000000a40)={[{@gid}]}) [ 3491.808678] syz-executor.1: attempt to access beyond end of device [ 3491.808678] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3491.810815] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3491.873730] syz-executor.3: attempt to access beyond end of device [ 3491.873730] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3491.875688] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:28:25 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1800) [ 3492.008840] syz-executor.7: attempt to access beyond end of device [ 3492.008840] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3492.010679] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:28:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) faccessat2(r1, &(0x7f0000000140)='./file2\x00', 0x2, 0x1000) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x87eb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffffffffffffffb, 0x100) getpeername$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 3492.080927] syz-executor.7: attempt to access beyond end of device [ 3492.080927] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3492.082810] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:28:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffff6, &(0x7f0000000a40)={[{@gid}]}) 04:28:25 executing program 7: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffffffffffffd, 0x9, 0x2}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x75, 0x8000]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x5010c3, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="c72163e0cb6b813b24f1d49c677a458b57b80f2f85705b545b0f7ef9d8f82ff4f7c7cf0b5182fd54d8ea36102117650c8ab09c9e59f196323111d2359dcff77c97bf4100e580b3bd5516f204abf71555d7f25c3ceca5b6a78348f1f04d40e45546bfa687cfa7fe54c732bac7a1ffb87e34689d2231d0fb27147e6cd40a3c3ec58dd6bbd7a9f1ae6032cd081865b7282910efd194f45fac98de593bffafd27bab1743e60515511e1638428e3ad04eb70ed8c023d4", @ANYRES32=r6, @ANYBLOB="01040000000000540c9fb8ff7c6cfedfd68d2a84002e2f66696c653100"]) openat(r7, &(0x7f0000000300)='./file1\x00', 0x2000, 0x20) 04:28:25 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0) [ 3492.270336] loop4: detected capacity change from 0 to 40 [ 3492.279304] loop3: detected capacity change from 0 to 40 [ 3492.284581] loop6: detected capacity change from 0 to 40 [ 3492.304965] loop1: detected capacity change from 0 to 40 [ 3492.360978] loop7: detected capacity change from 0 to 40 04:28:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000240)={{r4}, {@void, @max}}) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x3}, {0x2}, 0x44, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000300)="42c3d080ba937cd84b4b30c94bcaa34bda88c3542188b3251c37a8a00ee880c0f92344aaaa8811af5e1855ab3021f4927d7a07cf9cbf5e3b27d055453b80667191df6b03cdd0967ffd1e546bd43e50fc84440c7ed3ac35c638fc198c6f1cab8d48df22bbfc8ac3b20af4416b1a9598d45c8237725b4d45b315ff68723c3c7bab6c9ac58e539fa83e421a2c0f942ed5cf81", 0x91, 0x0, &(0x7f00000003c0)={0x2, 0xd2, {0x1, 0xc, 0xb5, "6d5f83c1016c54b0b4c390acf8dfc2a7a80175322a4e562e03a4dd82e6afe4be6f7092e3b1e3c8f136e28a4520ab4d701cdc2fd634d7bf0dda61db6a4013a4d0f6923d1a8463358c8dd9735ab502475e536c8421fdbd38322995ed776376e39073bd510539e20a6c0fa8a9c3635e644536a1183d62873583aab9f8d47d97e9db65f0ca339a91d511a324e29d025d3cc0d020abb7e6e12a508d5ee7e3888aea1c76fbb5666f0efc7f460c09ee24809c647f6931078f", 0x10, "58ad603b69f278aca5407a6d46039cbc"}, 0xa6, "a5904b7c097d320f54ab8d4e94d8448da3a658214fc1d61ed1a66a8b7ba9c109a16d2cbaf9156f93ee78015ff61fbb64704c4d345cab9218ba1cd8ec02c2b7fd98b8018bb35bb7f7d66f5c6df96677f9f901bfb3d0582d54c006b996a639837934676b9a9d1c309a56173e1d21acdb026f68038c552b7b3b33fc57df4252e20849c9cfcfb21efc036cb1a6806493a5c101f7233609338ce58c9605523a6c058c047114b74736"}, 0x184}) [ 3492.492904] syz-executor.4: attempt to access beyond end of device [ 3492.492904] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3492.494812] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3492.498094] syz-executor.1: attempt to access beyond end of device [ 3492.498094] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3492.500047] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3492.527203] loop0: detected capacity change from 0 to 40 04:28:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffffd, &(0x7f0000000a40)={[{@gid}]}) [ 3492.798890] syz-executor.0: attempt to access beyond end of device [ 3492.798890] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3492.800727] Buffer I/O error on dev loop0, logical block 10, lost async page write 04:28:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xfffffffe, &(0x7f0000000a40)={[{@gid}]}) 04:28:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:45 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r3 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x40100, 0x168) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x80000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000380)='./file1\x00', 0x41000408) openat(r4, &(0x7f0000000340)='./file1\x00', 0x80000, 0xf) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:28:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_client}, {@version_L}, {@cache_fscache}, {@access_client}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@obj_type={'obj_type', 0x3d, '[@\\.}'}}]}}) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x80000011}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsetxattr$security_capability(r5, &(0x7f0000000480), &(0x7f00000004c0)=@v2={0x2000000, [{0x1f, 0x2}, {0x6}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x1e, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:28:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r3, &(0x7f0000000180)='net/netlink\x00') write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000000040)="42dbe7ef400867e2", 0x8, 0x6) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xff, 0x9, 0x12, 0x5, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x3, 0xfecf}, 0x4402, 0x7, 0xfffffffa, 0x3, 0x80000001, 0x6, 0x4, 0x0, 0x2, 0x0, 0x7e8}, r3, 0x4, r4, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3511.901012] loop6: detected capacity change from 0 to 40 [ 3511.919120] loop0: detected capacity change from 0 to 40 [ 3511.929690] loop4: detected capacity change from 0 to 40 [ 3511.935321] loop3: detected capacity change from 0 to 40 [ 3511.936529] loop7: detected capacity change from 0 to 40 [ 3511.942216] loop1: detected capacity change from 0 to 40 [ 3512.064186] syz-executor.4: attempt to access beyond end of device [ 3512.064186] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.066093] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:28:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xedc000000000, &(0x7f0000000a40)={[{@gid}]}) 04:28:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3512.160122] syz-executor.1: attempt to access beyond end of device [ 3512.160122] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.162146] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3512.170192] syz-executor.7: attempt to access beyond end of device [ 3512.170192] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.172311] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3512.196140] syz-executor.3: attempt to access beyond end of device [ 3512.196140] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.198150] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:28:45 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x3) openat(r2, &(0x7f0000000240)='./file1\x00', 0x311300, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 3512.257260] syz-executor.7: attempt to access beyond end of device [ 3512.257260] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.258993] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3512.259736] loop0: detected capacity change from 0 to 40 [ 3512.262347] loop6: detected capacity change from 0 to 40 [ 3512.289845] syz-executor.3: attempt to access beyond end of device [ 3512.289845] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.291592] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3512.341892] loop4: detected capacity change from 0 to 40 04:28:46 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') open(&(0x7f0000000340)='./file0\x00', 0x2, 0x100) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(r4, &(0x7f0000000140)='./file1\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000000240)=0x9, 0x100000000000000) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) 04:28:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="150000000100000018000000", @ANYRES32=r3, @ANYBLOB="7f000000000000002e2f66696c653100"]) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3512.415191] syz-executor.4: attempt to access beyond end of device [ 3512.415191] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.417032] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3512.436054] syz-executor.4: attempt to access beyond end of device [ 3512.436054] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.437900] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:28:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3512.537381] loop1: detected capacity change from 0 to 40 04:28:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x8000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:28:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000140)='./file1\x00', 0x80400, 0x40) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) openat(r2, &(0x7f0000000300)='./file1\x00', 0x400200, 0x59) 04:28:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 04:28:46 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3512.611257] loop7: detected capacity change from 0 to 40 [ 3512.615061] loop0: detected capacity change from 0 to 40 [ 3512.634976] loop4: detected capacity change from 0 to 40 [ 3512.690818] loop3: detected capacity change from 0 to 40 [ 3512.706733] loop6: detected capacity change from 0 to 40 [ 3512.804833] syz-executor.1: attempt to access beyond end of device [ 3512.804833] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.806913] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3512.809663] syz-executor.7: attempt to access beyond end of device [ 3512.809663] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3512.811907] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:28:46 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x3) openat(r2, &(0x7f0000000240)='./file1\x00', 0x311300, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 04:28:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:28:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x100000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3512.964768] loop0: detected capacity change from 0 to 40 04:28:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000880), &(0x7f00000008c0)='./file1\x00', 0x1, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000900)="59c2128e22578841f2d9cb93fb2236f4b830fd9423cb67a8e02485eb51df61d9", 0x20, 0x6}, {&(0x7f0000000940)="4dfb93493c0365a82b3f5133164817c22bde81b4e97ae5eec3517d849fa10ebf6a3bc45bcde327c2119162a01a543e85f1a35eb7f5909acec29fc123b0f68083ec6d62138c859c238f80ebd37217c78e82aaaff6d484865e9e4c22dc43ad58a7292046e5bd36fb95ecce1d63b197f3ec1fffedf728d1a39d81441c359824ab760d0310888d1b3a06a2b40470da70", 0x8e, 0x7f}], 0x2281480, &(0x7f0000000a40)={[{@fat=@flush}, {@dots}, {@fat=@dmask}, {@dots}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'net/tcp\x00'}}]}) sendfile(r0, r2, &(0x7f0000000ac0)=0x91, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0xff, 0x3f, 0x2, 0x4, 0x0, 0x6, 0x20002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x40, 0x7}, 0x20, 0x2, 0x7, 0x1, 0x401, 0x800, 0x19, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x2, r6, 0x8) recvmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000140), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f0000000580)=""/142, 0x8e}, {&(0x7f0000000640)=""/232, 0xe8}], 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000fe00"], 0x70}, 0x10000) open_tree(r4, &(0x7f0000000b00)='./file0\x00', 0x8000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 04:28:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="605c6dd8a02b0008018e2d09e85a45aaea7ddb01000440002000f801", 0x1c}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="dfc3a16abbba3a81ae40c541d171d2bc90e54b5fc57312ed0f444b69a46e6ab9131307a8b96f11e19ed9ed772a19f16ca341e255b8b0561980841e771360d0b89bb16454919457c8b61304f626de1f4fe5f9779afa834233affec14956d1e5a45e1e7e284f2ba49b508952ba2d564d711593d80447bb271003d0998febd3d8e89afc799905c7e19aaf8104220e411ff769d685bb24f2b9b9d6b46079ab0863a8c862c0da4c61321d43ce8135c2dad0265d2243b31c558b4cdb38908e161c826686c74c41eda7358d35300658379ef370", @ANYBLOB="b6a51d7543ab5e33995c64c920e8a363cce72d364006a3fe446a1e95a67400c485947be4d456bc59a56fef2b159756339102e02f4e581ed299634c4e725d02f1fd60d400000429faca15025de9500db2028097a82445d648a822162a9e9c28477027e2773756080ea99b"]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000440)=0x401, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3513.061047] loop6: detected capacity change from 0 to 40 [ 3513.130857] loop7: detected capacity change from 0 to 40 [ 3513.147826] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 3513.979769] loop7: detected capacity change from 0 to 40 [ 3513.983307] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 3528.865266] loop7: detected capacity change from 0 to 40 [ 3528.869544] loop6: detected capacity change from 0 to 40 [ 3528.873993] loop1: detected capacity change from 0 to 40 04:29:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240)=0x90, 0x9) 04:29:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x40801, 0x185) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x48102, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2080004, &(0x7f0000000380)=ANY=[@ANYBLOB="6401000000ffffffff0000006e6fa3", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=],noextend,posixacl,nodevmap,access=any,version=9p2000.L,cache=none,permit_directio,\x00']) chdir(&(0x7f00000001c0)='./file0\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x100, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x43a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0xae, 0x7, 0x0, 0x0, 0x9, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x11100, 0x6, 0x7fffffff, 0x7, 0x8, 0x81, 0x0, 0x0, 0x20, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, r3, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) readahead(r4, 0x7205, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:29:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = memfd_secret(0x0) sendfile(r0, r3, &(0x7f0000000140)=0x6, 0xcb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x200000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r3, &(0x7f0000000180)='net/netlink\x00') write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000000040)="42dbe7ef400867e2", 0x8, 0x6) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xff, 0x9, 0x12, 0x5, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x3, 0xfecf}, 0x4402, 0x7, 0xfffffffa, 0x3, 0x80000001, 0x6, 0x4, 0x0, 0x2, 0x0, 0x7e8}, r3, 0x4, r4, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="601c6d6b646f8666d8a02b00f80100000000000000000039e1fb4e285b7819b9d4269ff7d299c4d62983a74afad23dd9ad633e8bf7fb995df4457368cc25b497f918443e1f325faaeb2ebe22830750df6c14521f2dce493c0c83cc02d931618b546ce860b46c825a78dcb3c659a648db", 0x70}, {0x0, 0x0, 0x2803}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 3528.915118] bio_check_eod: 4 callbacks suppressed [ 3528.915129] syz-executor.7: attempt to access beyond end of device [ 3528.915129] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3528.916505] buffer_io_error: 4 callbacks suppressed [ 3528.916514] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3528.928212] loop3: detected capacity change from 0 to 40 [ 3528.943079] loop0: detected capacity change from 0 to 40 [ 3528.945999] loop4: detected capacity change from 0 to 40 [ 3528.954103] syz-executor.7: attempt to access beyond end of device [ 3528.954103] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3528.955067] Buffer I/O error on dev loop7, logical block 10, lost async page write 04:29:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3528.970513] syz-executor.1: attempt to access beyond end of device [ 3528.970513] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3528.971514] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3528.973323] FAT-fs (loop4): bogus number of reserved sectors [ 3528.974789] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3529.007708] syz-executor.1: attempt to access beyond end of device [ 3529.007708] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3529.008726] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3529.045789] loop6: detected capacity change from 0 to 40 [ 3529.096652] syz-executor.3: attempt to access beyond end of device [ 3529.096652] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3529.097841] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3529.119242] syz-executor.0: attempt to access beyond end of device [ 3529.119242] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3529.120570] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3529.143329] syz-executor.3: attempt to access beyond end of device [ 3529.143329] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3529.145136] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3529.778211] loop4: detected capacity change from 0 to 40 [ 3529.786905] FAT-fs (loop4): Unrecognized mount option "net/tcp" or missing value 04:29:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x300000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x5503, 0xb, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x105043, 0x42) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x40801, 0x185) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008000000", @ANYRES32=r2], 0x58}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="38000000000000000000000007000000442025000000000000000000000000000000000000000000000000000000000001940400000000001c000000000000000000000008000000", @ANYRES32=r5], 0x58}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x80, 0x1000, 0x34, @empty, @mcast1, 0x40, 0x8000, 0xffffffff, 0x5}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40811}, 0x24040094) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r9 = syz_open_procfs(0x0, 0x0) fdatasync(r9) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r8, r7, 0x0, 0xfffffdef) 04:29:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x6001c1, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000005c0)) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) pwrite64(r0, &(0x7f0000000600)="6987dc145d580de34df9c89ba340a29a5e263742c419", 0x16, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000380)=""/99, 0x63}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x10000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3546.057814] loop7: detected capacity change from 0 to 40 [ 3546.069481] loop3: detected capacity change from 0 to 40 [ 3546.097267] syz-executor.7: attempt to access beyond end of device [ 3546.097267] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.098810] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3546.134132] loop0: detected capacity change from 0 to 40 [ 3546.142051] loop6: detected capacity change from 0 to 40 [ 3546.156691] loop4: detected capacity change from 0 to 40 [ 3546.174102] loop1: detected capacity change from 0 to 40 [ 3546.187996] FAT-fs (loop1): Unrecognized mount option "ip6tnl0" or missing value [ 3546.244952] syz-executor.3: attempt to access beyond end of device [ 3546.244952] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.246718] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:29:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/96, 0x60}], 0x2, &(0x7f0000001380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}, 0x2061) syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x100000000, 0x2, &(0x7f0000001600)=[{&(0x7f0000001580), 0x0, 0x1f}, {&(0x7f00000015c0)="393731fc", 0x4, 0x1}], 0x80, &(0x7f0000001640)={[{@shortname_mixed}, {@rodir}, {@uni_xlateno}], [{@measure}, {@subj_role}]}) openat(r5, &(0x7f0000001580)='./file0\x00', 0x18000, 0x140) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r6}}, './file1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x400000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3546.352872] syz-executor.0: attempt to access beyond end of device [ 3546.352872] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.354558] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3546.381959] syz-executor.4: attempt to access beyond end of device [ 3546.381959] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.383607] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3546.415030] loop7: detected capacity change from 0 to 40 04:29:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {r1, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3546.447088] syz-executor.4: attempt to access beyond end of device [ 3546.447088] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.448308] Buffer I/O error on dev loop4, logical block 10, lost async page write 04:29:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3546.528047] loop6: detected capacity change from 0 to 40 04:29:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x500000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240)=0x90, 0x9) [ 3546.607840] syz-executor.7: attempt to access beyond end of device [ 3546.607840] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.609269] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3546.650071] loop3: detected capacity change from 0 to 40 [ 3546.664134] loop0: detected capacity change from 0 to 40 04:29:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000003500)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/124, 0x7c}], 0x2, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/65, 0x41}, {&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/91, 0x5b}, {&(0x7f0000000240)}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/37, 0x25}, {&(0x7f0000001940)=""/222, 0xde}, {&(0x7f0000001a40)=""/195, 0xc3}], 0xa, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000003000)=[{&(0x7f0000001cc0)=""/80, 0x50}, {&(0x7f0000001d40)=""/115, 0x73}, {&(0x7f0000001dc0)=""/178, 0xb2}, {&(0x7f0000001e80)=""/158, 0x9e}, {&(0x7f0000003680)=""/34, 0x22}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/84, 0x54}], 0x7, &(0x7f0000003080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f0000003100)=""/169, 0xa9}], 0x2}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003400)=[{&(0x7f0000003280)=""/88, 0x58}, {&(0x7f0000003300)=""/170, 0xaa}, {&(0x7f00000033c0)=""/25, 0x19}], 0x3, &(0x7f0000003440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00"/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}], 0x5, 0x40000000, &(0x7f0000003640)={0x77359400}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3546.759088] loop4: detected capacity change from 0 to 40 04:29:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3546.903456] loop6: detected capacity change from 0 to 40 [ 3546.919014] syz-executor.0: attempt to access beyond end of device [ 3546.919014] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.920916] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3546.979810] syz-executor.4: attempt to access beyond end of device [ 3546.979810] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3546.982670] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3546.988260] loop1: detected capacity change from 0 to 40 [ 3547.006892] FAT-fs (loop1): Unrecognized mount option "ip6tnl0" or missing value 04:29:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x80500, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x600000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0xff, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0xc8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0xffffffffffffff71, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x40000000}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfe}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1f}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}]}}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe63}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040840) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) close(r0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) 04:29:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r3, &(0x7f0000000180)='net/netlink\x00') write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r1, &(0x7f0000000040)="42dbe7ef400867e2", 0x8, 0x6) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xff, 0x9, 0x12, 0x5, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x3, 0xfecf}, 0x4402, 0x7, 0xfffffffa, 0x3, 0x80000001, 0x6, 0x4, 0x0, 0x2, 0x0, 0x7e8}, r3, 0x4, r4, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xbe0, 0x101000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) openat(r0, &(0x7f0000000140)='./file0\x00', 0x400040, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x1528a, 0x7, 0x200, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000200)={{0x5, 0x1}, {0x20, 0x8}, 0xd96, 0x6, 0x3f}) 04:29:36 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x5}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x400000, 0x160, 0x14}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) pidfd_getfd(r5, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r8 = syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file1\x00', 0xaaae, 0x9, &(0x7f0000002800)=[{&(0x7f00000003c0)="85a18f2bace2ca853386bf77e4c0e5918c21ad3c6a1c97fc0d4297b2ae4444755130f4ed73334e0f038d241cb0f92a1ccc0a962ecc754f5bb4e5df16dd1f5fd689ef6a0a1a7e244b1ea5a961cc92759c5acd011cdd9f6dff58f4860121f051393896283468590aa4a0f8d9c61effaf6fac3a232c9416573a2a7a62f90d20706e770aeb80c56a9e7678d8b9ec0e2a18f7e9a1e75829c8dd408d4a00325d5cc14f46ee5291e8badabfe189c1541aba3d469877f55a5f7f", 0xb6}, {&(0x7f0000000480)="8fdbaeecc2dcd0ae2d4d6dfea8a2f90dabf02665248a013aefaf6aa80c738cc873444ff3604960192533be4b2c34bba394f0e548", 0x34, 0x3}, {&(0x7f00000004c0)="34022d9064accbc5c36f85d671f041a8b45e3cd84a47a252d4027c1c4f7a211c868a66912ae507443afecb8bea86a41af52042614837fe150f1c91ca06ca3b58af1fbbd8b73cadd87be32913f13f4ea8eb57c2bbe32448f18112d2931f7413dcdeacd4425f1fb66f51e71a4b39ea60bda41ff4a6dc758b29a5e10069468e643ea8a6a9c42ea739f04731fa7c3405badbaa232163116070b7407b58d419b38ee7879888c8e56f1bb24295510e24fd001df32a0c4fbe533aacf842b511e738ee5a79415b2f0f1224ae77f0ab4b3cbaf37090", 0xd1, 0x4}, {&(0x7f00000005c0)="0f441ecffdbf4f67e3a201fedf19e2990ae04b43fe2a7e24b6e0abc065b2995c6fd10ce33c8327c83f2ec226e09a75440eb3ed96", 0x34, 0xc1cc}, {&(0x7f0000000600)="4d4fca01241c9e5a795c618d04eb4ece73a46dbb9bcf87523175174450cbc584325bf72f6cd499ed1673e28c2e8fb72e7cef0738f172a32c4910cababe1949101737e06ed302e7d6487ec077ebe67cdace92113e7f75eaf946639e23b90345b14390ff238567d0e76dff3bd2a2", 0x6d, 0x3}, {&(0x7f0000000680)="749d949d67cbccc359bd58c406fade60c6f283606ec18939fe837136faa6aa8573523efeac8c31fa545a5a0c767f43b12ead92fd5911792c2d40108c734220771e6af1dd8f5352077a2fbe81d0e99b1d3f6194f41debf28e7d35c6eaf83ffac5e4399c35c83f9d8f0f29f710cb3af138750cdb6b0c6fb612081d2702df4ac263f59e174209510083dce11de00dbb030d4c159e8d46ea27bf704a02a059102c9bb0516a0b5822ff5b9ab0dc7434982f6ef68a7ef2fb3de8a40cc410147793a458489108583842a79d2fc27f9c77dd3f", 0xcf, 0x5}, {&(0x7f0000000780)="3d5b1f6ae40ed487bcb7e0c3438f8ba7ba98c13389ceaed00f2d8ef997067fd0ca2f4e9e0b89eb415b8a0d0c0cebdd8d429d1adae935faf9ea65d63fd8ec4c8787a57a966a3040ea24f25106", 0x4c, 0x1}, {&(0x7f0000000800)="23cc62b80d793da5e7651bdd5961735a7411ca5e5d9a8eea180d4fa279052008a2cb3a3254438abdaccf308635fc17352169afc902e31751451b6f9e410c559fdea67e2a7397cedf97c783bd61c765757f44a953608b005c720cf85e377b06d15c57d3fa2200d34a2d8c71bc4aad3092ee05cc58fe674f4a06090f1ddb5a3d16ebca37af9e2efb9870a1d1eefb24fd3ab392757f14e3736c2109a3a9dbe9a90abe5d6d84489f8894ccb8d0976704ce7dc937c3ab2acbd522dfd3beaf5588f88210d7325e9e89e0d47e1ebdeced35be841002fc731b8caafd164bc97c97141bfb13223de4e370c75fa7f9225ebf19702cd20966250131dcd7796c22fc174245bec3a682672159f7f439dc89aa0c3d702c99fd9af5c94bf8b390e1ac7f7c7d1b769f25545a5d801ff6bb007b4fdd4ba80b298ca894cd24b728514a37fb53f856d48de66faaa762aa09d5a68a30287b0bd91014a024d4f90a201e957410ee5b1cbfcf8cba299612baadef70660ad863a846e1e9ca161b991f3d3c0b1bc50f51275f5170d6b5f31ba7b0defb27fb106ad873ddd6c376a964123435a66a108c8a342732c45eaf714d597f488c15125fedf2c631c13db846ac9426ac0fc22298eae1b09baa457fae3817ebc16c1aa8d714f84285b031428a3939323e8976e0eb48cf6f60853695a28a82357c084607653b21df0c289ad1893bb95968003265065c4933ac6e80446525e9543deecd6e3a7261b0a2d27a0a24d839bb38c9683164a5ffa3b568ac6b04f6d9f24b97617c49abcbb982281195b6e88e2b02a6dd08917a6682f55f87a17f32faf6003e97be83f872ec3fbe265ace99b4b04a01f251b46e982ea573ccad9e129ff2853973cd7262b590d19aea17c325fdd3bb3e12df10f86b4a111c1b1f59a657cc0d6c9151c1268648c80039d8990b6deccc4e996807660ab6195b00360e7843aafbb963cbd8f1ffb46cdb17bf3b71aacc8c40ea4d8d65bf4e1d05bc60b919f6c2b31dcb0ccfc87ccfb5670243e7fe831ef5d08af503142ae30dbc60cf7185d2a9d30f787204e9828301d5044b7915f7a33e1fb122f00e45e03d79ace37111d085123897996ad5da136b6f1aab0f3a48c827fc9d22f632f47188d430199305acb7d9f6b55566232a0fa5b2dbc8f8aef3ef3d1413f89164a7dfdcbf0df4067e48362525059c2201a7388b5b8488d35b0a7362223bae00c9b63692c22647b3c68eed8dd4abff8e249a322c3f6996f996c62fd331b8ef4a8dd955b625f44898e31bb8d3368df02bb80395d6bab0e84311cea9164468e44a17fb142f38abe13b43144292577ec2e3133f1bcaba80d52f1998614070c95127f5b1cf402705aed1f51e993cf24ac2b035aba138e81bd7fad85732cdcfe2da5ef627cd408c1df55e8eaf61191ccc9b60dc8707b9d0330a3384ba08503d2004fc3810b44860857599d2953f2f54311110e3d477a17b32f38f06387c94d45b30834b8575bdb0efc9e32726093541a57537ee757922b917ba53cc37eb4150d6a19d36928a94dc477e537ae370f8841c7834b244b3077691962fbfd7b036578b0cf86c3553a70c9fe9aebcb0486230907521617958080dcc4b20ec81c7b6f50610a58dc8509ad8ab6d8dd38911c734ae019b16475b7dc7baab31270f1e5fb03f1e6b913bf9f45d5b2f1b3d07cfe7ae02ebdcbd043bd35592797bf0f45f4485a833307c41e48e97681ee7ce0b1e9bb33e3cb3dd8682692b3fc8d4cec8dad74fd15aba1c7fbdbd5307757e51a5649e5e21a400e53ff0ce7965b601cb7a7bafb384d3016a92a163ba064182772eb6c1b309f8f6fcec7d905f20c0e6439e21801aa1bf76cf31f27c5ddbeb0c85c8eb9a60e12af8ff1b3bddbff3d6c766461bdabf37a88961d282368289884025760bfabac2db8a20ba94609828c0944a1e228faaa60c867993812db45902a80045e9e8cef0f5e1d37fa0c2c1b7af24f785d844ff5287a816d3022d38265f50cda35abd6c4a6d34cf9c6e0376a1a31c81c2c626da2d406642f5231b8bbcc129795d3444654d622012cac75479e62e8b26b16af1225d03b492f397fdf99d454009dd8134f0853758cbae6d24f72e61b5aefedf5053a288c98c323ca75e74d7acef879c106540fc13beb156776e3c4b864cfabca906436bbcfbfa6e28795aa1fa160e0dd32e7568e741855d5be38f365a1bd96e268b0430eda7cc2da4960ef2b605dcdb13cbdd51f5227069da9735d6c364b796bb7c3a3f2120cc5bc7fab5526476c86037a65b978511698c52698cbd0cfa2ec6491abfbe149bd502f5e50dc19329894e76c1bcb6ef5bf034fd5fa7e809e07cdabd44fe734067483d51b28a9ad64b00ba1ae97589751e90f6bc44f3792c88b8e5aa940de8a3c65a304b4bf5f41e00f1bb4b425361f3aaf5fc9aac21ec800029938ccf7146ce566571d3f46395eb3b6e139a82987e652debfba4ca45bd32c1d094773a012ac5201c4946d065bb343ebfc514fe553d9f11e8af046209a5ffbb0ee74c5084ab8e4fb7a6b4d39e58888e1be26aacf22028c036cdc4baf3d591ee7552927b61a6e4282614f5c30177056639742164c7b80d732a3658e45ee2c17edfb42ae426986e75e02dbde20cb42768c956f5dc213b2461119ad52db1b61ddff27813bc7a5c0217b3cc4659ab0f343ab0ef7a5213b5bb0018666115a6f404314a0a6818813285214d6c92d94ab46ed1cc163a9e6ff6735ca225fc458852011d67db7a5292ffeb47a0c67845cc349fa393b39f6c6f98085d5bbac9730c893e3c238066f24fdadb862c23b1f4afc9ecc6e912617cc452194ef628338aa4888c7014b213ed09419539301934ca2a958ad61b8e00c2a735f9618f1fbfe773823cf705e6a0413ebb809435033bc123321e5cf0524c9ab2a4be58170c1f9b01297e3af80d04c7afa6b31b5734c7610033df6e70aa4317b3ba7193964a0b2325b625034689c8c4ed91453fb0d294cdbc0bd2481af01a6be13a561fcb589cfa2d92002224725d3848dd371ed039142fceabcc2becc5a78924619e87740eafd68f062a0da8d77b7f82015d872ebdfc70085cfae10c5ed5466a7655f68b2804c8af0e182668879375de901740b86a1fb297edc8ca7d9e82d5e9181055d3f3300502d82ecd6addce5e2b8333de5f509fd7349fb2c88a9a4222a83f35ccbb298258dcb8aa69a0a7565ff005ba618b48dabe257bd38d2b2e9c88777f5f252fec5e2843561e43bbc6220eaa4bfc5492da6ab4dc91822db35028f3a331667690cfaf5cada43348ef7c22bde080fb24caea018330ed65ec4d92909d4615d49e17fbfe0c1f32f4b003e8e4444278da8ddcdc1a71de59f4e5c95a881d028ca32defb5349e72bbc6e03067409e1770890ec5802b3a52b6201c048f1e5059709e6eec95f407055f9a427e7f410930098ac49b6ad2b14e956c6382ca3b4237907587bd87a25b52c9dbda963743fbded8eb3623490a107cd777e27d5d64b4b003f228db8d97d169b4cdba43905bfd32ec2fc4211a4cdb143613dfbde42fe114e6844c44c16646cb39d0fdd2f3b2c3552e6083394d03cc0c4b8a7680db46c55663625c87888d631027983a68a5802f8763c600eca8312a5ce2fab2f65a3292a6b3a9570e5c4d763e1bcda5ae194278cd7eb8929942c35f269a6a1c5a50f8e610f9cff14cfd75a50bbc5d7a9f60809adedb4e04b84bc529a2aa080f3e03aa8c7a3cda6aad9cc48ef31a51facb699cc7d98220d8302a7658d19117b6337c02f343d5c9a01be51b2d64d1f0192a0956cef60c8cf6a2b3f6f43ae5ce0becc296f4c3a19c200fa78df8677398b2ed4a8f28d47dd0255952545e662512f6cab0a2243535f8b78ebf4338a37dfa9c55db96ad92e822c362efbd657c35e0ba80eb1a805fd073a4d2d1f1dce13f44bcb63863b2e3716eb30a40316fa3c61bdc5ba8391c39aa24ecab3d16b2db2571f2fe135024566ea41ac6a73a2451d9f215d9eb7b6a4798b89af31cae33038aaf648fc4b95e16d99109a8ae338215f1e3583ff03bebb7034a73bc1b9aa017d1030bc4b1b0e9ecca5b5a3927bc9b20df4a88a83ce9f7193e007ef01674097fc0edc3d5611154d876906c441850a11f7547044af45c3ff93ff9b1a7e08723fd04d907335539e2743efa938b1c684c1acabe3eacbaa69ce4caaaa3f2a1c016272f95d1f3d107d96c9e2f78fd29186b515c58610d756891b477abbfda8ef1c7192d06425e0b4eb995bf43bd37b9fa96efc49aff2b742bef1d31560e5856f6c3c417785f39c1f44a89e9940f0ea5823f714ea2c786f17a9b4258f82c3aac9b84387ea0b2149ea317f525e04835b64e938a5207ee5063c8012849967fa75d78a3d91f9336a634e8ad56775cdab53ff7c36a176a6c49bea6cd459b26d5ca0ff4ffbce6eeb64bf2b49119188683c1c0e8a7eba24784e70a77064d4e27e2e2c78bccc3b91ab32e286c715ae03eec262241d0eb7a72e41e08f3b80881ce9ec9928e8fbced1bf61d8c6c2abeb1d292f36b3faebe672034572c3c4adc4330479100c2740978445d9f2c55857833cf63efb8cb62c02f3ed3d49d5e81154708dd14c2b80b86a25624cba93c4114d54fdbea51e6c25831e439be60ff918f5e5f5fa353e65e67e0ddc408824221fbaa27f9c24f4b31a892226522d0b6b7ec250aa3b69c9deab20a019011151a4f18127d527f8e0a01a94b756b62b6c3d94ceddc6f0879eff11084ee5dc9e7105be94a0cf96e65c3f4d9b9d91421c0b5487eca1b2faba61cd902afd321a4ad71893eb34e3015fc7e97c5d8c34a5e840fee3c3e0432c1d772c3cd5c954697372fce74f168ed8a1debdda5b6cef39ea993b409137b3109d456445b9bde02a8d7660a91998a774cfc14a480a0455be65978232d08248fae8e0b577fc273e4e607152814379d6a6e4d9ce3535301ec9a88246ec378b1bf7963c14b23aef31434e6f236f8a5b34cf56564d781cea7a11827e935810d86f7bc7175e3c63238178ff84373d089f1eb7c0ca00028251e897faf1f27eca64e199b826572603d63153629a923561c9e08cdcf07ef470b6c0e0579a7cfc7c3d258e07056242eaf8ed476b170589890ab1428030fdfb5aa831ad1f4d62e8c4059644f6528870c521912d5150b3e3212d92ad52ee58d27a47659121f48b3e137e089dcb081b716658ad7e8029b04131d8739e90f6afd16d54be5a9603957170b71104b02c0c4fc39ec74288757e92b66ed30710197c05bc50828c04ea5aba5b76f558741fbd18a6f57904d9bea923bb48ce54f9635f7fac7465aef5d0e62763b1a8031fa1a5f9c6d062f1506f97e4e0165d7e1ba34adc59592111d289efab8c7447dde84f420c49dc4c52e8452a7e753a07962fc1f334be7679043cc421fb600d083ec3e80a9796c83beb6d434975abb093dd266e426a19f1038b394aabe6a5ef9b3cb85da8e929e2f37b742bbbca4179fbca9c732af5512e94d34754300b6f8ef4e670e6177bf936f8c9c1416d2d8b4391bb39a97d01a2eb73be38bcdf7643db68fc6731898972935886f2d6f61c65f8a5f18e7b22b038bd0ed8dacdbe8f1ef8c90b3d9007b81053215ccb9bc23a22304e0750ff79a7ed54d0d34ddcfd5b3479698d78dda9a702ee6add531d8e45ff4e8855206d8c1a94eb9b5145d8926d13fe74dbcc25a02548f0dde921e2c8354de29a49d1cd8bf166a61a5d9a8ba0391c9336eac37ff8f48a4983be984333094433f9079f32975c10af9ab1ea6a880b00be34e076e549ff5bfcc4e9758f45756536a3fd088", 0x1000, 0x3f}, {&(0x7f0000001800)="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", 0x1000, 0xfffffefffffffffd}], 0xd93f883c5cdfef63, &(0x7f0000002c40)=ANY=[@ANYBLOB="6e6f7265636f766572602c6b6e69745f697461626c652c6a6f75726e616c5f70617468332e2f66696c65312f66696c65302c6673757569643d61376438343738352d640c3334383053362c636f6e746578743d73797374656d5f752c66736ca4cb1030303030303430302c66736d616769633d3078303030303030303030303030376666662c61756469a62c00000500000000000000000000000000cf454550cd1c54d6f0eb7b9571b9999d466bd304ec554151875b8f38e22652f35791b498b5633667e766"]) openat(r8, &(0x7f00000029c0)='./file0\x00', 0x440800, 0x108) preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r9 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r9, 0xffffffffffffffff, r7, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000002a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3562.436599] loop3: detected capacity change from 0 to 40 [ 3562.439736] FAT-fs (loop4): bogus number of reserved sectors [ 3562.440171] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3562.458813] loop7: detected capacity change from 0 to 40 [ 3562.459092] loop6: detected capacity change from 0 to 40 [ 3562.476754] loop0: detected capacity change from 0 to 40 [ 3562.478393] loop1: detected capacity change from 0 to 40 [ 3562.508599] FAT-fs (loop4): Unrecognized mount option "net/tcp" or missing value [ 3562.524774] FAT-fs (loop1): bogus number of FAT structure [ 3562.525664] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3562.539599] syz-executor.3: attempt to access beyond end of device [ 3562.539599] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.540567] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3562.576455] syz-executor.3: attempt to access beyond end of device [ 3562.576455] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.577501] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:29:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3562.604912] loop1: detected capacity change from 0 to 264192 04:29:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRESOCT=r1]) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000f70300042dbd7000fedbdf25070000ff070000002e2f66696c65312e2f66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x20004811}, 0x90) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3562.638101] syz-executor.7: attempt to access beyond end of device [ 3562.638101] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.640178] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3562.651701] loop1: detected capacity change from 0 to 40 [ 3562.660775] FAT-fs (loop1): Unrecognized mount option "net/tcp" or missing value 04:29:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x700000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x1, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="b429f9ddf577f2d6d618b3d48f183e9cea482fbab6d017263db592f937203f2ac1e8eec4a9051f8e16b77320d50876274ff293e264bafd96a4af63f80c98c1977c1d9eebd89c74234048974be8473f8a265b563c58dde22e", 0x58, 0x100000000}, {&(0x7f0000000380)="4886963c881cb58d2622256b125eef1be59cff5d96d7e46ed500f1992d3963af814a0d6c4a37915ad1a436781973277131a863b0ded475bc7d5f1a5ca6cb78bd4274710b387d90a3b6c62615be6f", 0x4e, 0x2}, {&(0x7f0000000400)="531b6b7ab3ca11c36c8199a2c9aa156db3e00ad928ef810efb4b359414fcb117a17c3030e2138566782874d35492e73399b0f8f5f7866d0810d9a50f2d45c19b6115d3fa42a3293ac7a4eb4d4ccf45afbd8eb5dd0e894f4c411629ef98462fbcf989ae57f08a7a8849e05a5df1bab0e6d729da325a54204b44fd5d9a29ee44f88787bcb906e1db482ba2edc772fec0d3eebf06e1fd1bc3cbe40b3cd234c067e8f054aa31d81e2bbd01b88a78", 0xac, 0x703d}], 0x100040, &(0x7f0000000540)={[{'vfat\x00'}, {'-'}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@appraise}, {@appraise}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '@&&'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xf9'}}, {@seclabel}]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3562.728382] loop1: detected capacity change from 0 to 264192 [ 3562.741591] syz-executor.0: attempt to access beyond end of device [ 3562.741591] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.742692] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 3562.755072] loop4: detected capacity change from 0 to 40 [ 3562.766029] FAT-fs (loop4): Unrecognized mount option "" or missing value 04:29:36 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x80080, 0x104) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3562.793118] loop3: detected capacity change from 0 to 40 04:29:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x800000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:36 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3562.874799] loop7: detected capacity change from 0 to 40 04:29:36 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x5}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x400000, 0x160, 0x14}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) pidfd_getfd(r5, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r8 = syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file1\x00', 0xaaae, 0x9, &(0x7f0000002800)=[{&(0x7f00000003c0)="85a18f2bace2ca853386bf77e4c0e5918c21ad3c6a1c97fc0d4297b2ae4444755130f4ed73334e0f038d241cb0f92a1ccc0a962ecc754f5bb4e5df16dd1f5fd689ef6a0a1a7e244b1ea5a961cc92759c5acd011cdd9f6dff58f4860121f051393896283468590aa4a0f8d9c61effaf6fac3a232c9416573a2a7a62f90d20706e770aeb80c56a9e7678d8b9ec0e2a18f7e9a1e75829c8dd408d4a00325d5cc14f46ee5291e8badabfe189c1541aba3d469877f55a5f7f", 0xb6}, {&(0x7f0000000480)="8fdbaeecc2dcd0ae2d4d6dfea8a2f90dabf02665248a013aefaf6aa80c738cc873444ff3604960192533be4b2c34bba394f0e548", 0x34, 0x3}, {&(0x7f00000004c0)="34022d9064accbc5c36f85d671f041a8b45e3cd84a47a252d4027c1c4f7a211c868a66912ae507443afecb8bea86a41af52042614837fe150f1c91ca06ca3b58af1fbbd8b73cadd87be32913f13f4ea8eb57c2bbe32448f18112d2931f7413dcdeacd4425f1fb66f51e71a4b39ea60bda41ff4a6dc758b29a5e10069468e643ea8a6a9c42ea739f04731fa7c3405badbaa232163116070b7407b58d419b38ee7879888c8e56f1bb24295510e24fd001df32a0c4fbe533aacf842b511e738ee5a79415b2f0f1224ae77f0ab4b3cbaf37090", 0xd1, 0x4}, {&(0x7f00000005c0)="0f441ecffdbf4f67e3a201fedf19e2990ae04b43fe2a7e24b6e0abc065b2995c6fd10ce33c8327c83f2ec226e09a75440eb3ed96", 0x34, 0xc1cc}, {&(0x7f0000000600)="4d4fca01241c9e5a795c618d04eb4ece73a46dbb9bcf87523175174450cbc584325bf72f6cd499ed1673e28c2e8fb72e7cef0738f172a32c4910cababe1949101737e06ed302e7d6487ec077ebe67cdace92113e7f75eaf946639e23b90345b14390ff238567d0e76dff3bd2a2", 0x6d, 0x3}, {&(0x7f0000000680)="749d949d67cbccc359bd58c406fade60c6f283606ec18939fe837136faa6aa8573523efeac8c31fa545a5a0c767f43b12ead92fd5911792c2d40108c734220771e6af1dd8f5352077a2fbe81d0e99b1d3f6194f41debf28e7d35c6eaf83ffac5e4399c35c83f9d8f0f29f710cb3af138750cdb6b0c6fb612081d2702df4ac263f59e174209510083dce11de00dbb030d4c159e8d46ea27bf704a02a059102c9bb0516a0b5822ff5b9ab0dc7434982f6ef68a7ef2fb3de8a40cc410147793a458489108583842a79d2fc27f9c77dd3f", 0xcf, 0x5}, {&(0x7f0000000780)="3d5b1f6ae40ed487bcb7e0c3438f8ba7ba98c13389ceaed00f2d8ef997067fd0ca2f4e9e0b89eb415b8a0d0c0cebdd8d429d1adae935faf9ea65d63fd8ec4c8787a57a966a3040ea24f25106", 0x4c, 0x1}, {&(0x7f0000000800)="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", 0x1000, 0x3f}, {&(0x7f0000001800)="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", 0x1000, 0xfffffefffffffffd}], 0xd93f883c5cdfef63, &(0x7f0000002c40)=ANY=[@ANYBLOB="6e6f7265636f766572602c6b6e69745f697461626c652c6a6f75726e616c5f70617468332e2f66696c65312f66696c65302c6673757569643d61376438343738352d640c3334383053362c636f6e746578743d73797374656d5f752c66736ca4cb1030303030303430302c66736d616769633d3078303030303030303030303030376666662c61756469a62c00000500000000000000000000000000cf454550cd1c54d6f0eb7b9571b9999d466bd304ec554151875b8f38e22652f35791b498b5633667e766"]) openat(r8, &(0x7f00000029c0)='./file0\x00', 0x440800, 0x108) preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r9 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r9, 0xffffffffffffffff, r7, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000002a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3562.919648] syz-executor.3: attempt to access beyond end of device [ 3562.919648] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.920885] Buffer I/O error on dev loop3, logical block 10, lost async page write 04:29:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') lsetxattr(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=@random={'btrfs.', ']\x00\x00'}, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x13, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_procfs(0x0, 0x0) fdatasync(r2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000400)='./file0\x00', 0x200) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="e3a7b6a3c17313755002ce2ac4b366c97029f462a55aaa61929822c18ac487bd9dcba434c15aca101838bf0675b29c54dc192d2018dfc447854ddec203ab57705cb3b895d2ef1044df24f0d2bfa0698a0bb00e1541bc55fb346e7c125bcce55d286fd5b2fbf155", 0x67}, {&(0x7f0000000300)="68875d9e0cca5cc4abc3a0d815532c90a3b424569888cf9c368a8b270b85140badd03ec07510f5f5c9eba8c471f74556cd195684d274f0d3d96c294af29ce2379b7f033354450d2ed4ce928eb9de1560533686d39e0338de585e66a341ac58e16893cd2315dfac", 0x67}, {&(0x7f0000000380)="9f5db30d42346a7a2bf41262e5fe2a7290163467bfc7a2227a8175e40de6e27438ee116c9c450bb7982caf2e2a6ada5549f231bbffa6c924f9642d947e5cbd07ee6fdd", 0x43}], 0x3, 0x1, 0x44fd) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3562.964622] syz-executor.7: attempt to access beyond end of device [ 3562.964622] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.965828] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3562.973360] syz-executor.3: attempt to access beyond end of device [ 3562.973360] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3562.974480] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3562.982867] loop1: detected capacity change from 0 to 40 04:29:36 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x900000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3563.052230] syz-executor.7: attempt to access beyond end of device [ 3563.052230] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3563.054309] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3563.126593] syz-executor.1: attempt to access beyond end of device [ 3563.126593] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3563.127815] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 3563.601494] loop4: detected capacity change from 0 to 40 [ 3563.610840] FAT-fs (loop4): Unrecognized mount option "" or missing value 04:29:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xee01, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:29:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') fdatasync(r2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:50 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xa00000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/128, 0x80) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x2) utimensat(r0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:29:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, 0x0) fdatasync(r1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 04:29:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r3 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="0100ca44d00f000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB='n/file0\x00']) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000680)}}], 0x2, 0x2, &(0x7f0000000780)={r4, r5+60000000}) setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02001200b386f3cb79718f7dd7c66ea36cf70bfd1184352bb69c55e3b14b27f9d7e1", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=r0, @ANYBLOB="02000100", @ANYRES32=r1, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB="040000000000000008000200", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="10000000000000002000040000000000"], 0x9c, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0xb, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r8, r7, 0x0, 0xfffffdef) 04:29:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file1\x00', 0x1815c2, 0x8a) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f0000000140)='./file1\x00', 0x60040, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 3576.445037] loop7: detected capacity change from 0 to 40 [ 3576.462862] loop0: detected capacity change from 0 to 40 [ 3576.485146] loop1: detected capacity change from 0 to 40 [ 3576.486193] loop4: detected capacity change from 0 to 40 [ 3576.490856] syz-executor.7: attempt to access beyond end of device [ 3576.490856] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3576.491916] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3576.505170] loop3: detected capacity change from 0 to 40 [ 3576.575081] syz-executor.4: attempt to access beyond end of device [ 3576.575081] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3576.576196] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3576.579342] syz-executor.1: attempt to access beyond end of device [ 3576.579342] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3576.580536] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:29:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc1, 0x2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(r3, &(0x7f0000000380)='./file1\x00', 0x284c3, 0x2) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xaa79}, 0x0, 0x6, 0x6, 0x4, 0x0, 0x6, 0x0, 0x0, 0x2b}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfd, 0x80, 0x6, 0x3, 0x0, 0x81, 0x4102a, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x88e3, 0xbb5}, 0x40, 0x6, 0xc3, 0x4, 0x1, 0x3ff, 0x0, 0x0, 0x7fffffff, 0x0, 0x7}, r4, 0x7, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1f, 0x8b, 0x5, 0x5, 0x0, 0x8000, 0x13841, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ffffffe, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1000, 0x0, 0x4, 0x8, 0x7, 0x36, 0x7c, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x14, 0xffffffffffffffff, 0x1) [ 3576.602174] syz-executor.1: attempt to access beyond end of device [ 3576.602174] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3576.603219] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xb00000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3576.676283] syz-executor.0: attempt to access beyond end of device [ 3576.676283] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3576.678556] Buffer I/O error on dev loop0, logical block 10, lost async page write 04:29:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f0000000780)='./file0\x00', 0x0, 0x1) fdatasync(r3) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x4000, 0x48) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x6, &(0x7f0000000680)=[{&(0x7f0000000300)="5243d9429355f6008c1459487e4906858b8736776184a47561327db9f5e62db4e58b6f6f792119795d542e071351122cd0c2a09c50a89993cebabd5d701d0ddf7298968adbfdde7c7d4a7e41cb41c487a3759844108fcd6819e9c0ad45627da8c017f4a094744c759062cb1200d8001d30b5ff5dc1b2a1a7a4733639d40a766a18066e449a7a", 0x86, 0x2}, {&(0x7f0000000180)="429f6a45b115cb52f5c858c1a7716119c0ef003a70", 0x15, 0xfffffffffffffffb}, {&(0x7f00000003c0)="1738dfb2aa8859af67a96ebfdad63649eafa843d55acd24416cf23011455c978f408a7a3224a316d4bd81c3b295ab9ba3f8b80814f8e0aa445a817cd5f7855a22f5bb414e0f73737ab2f6308eb66197a6453374b40bead00d6818e35109ddc181940479eea59b2e3e78d67eaee7ed0284be3d4a6558b9a963406b622f9b56b57fc6862ba5724f93c5889c5fdf48e69312e9a305d43ae0e085e1f9f83fddfa0fd8e8befffd6ecf4d3ebcc11af9ce1b45ba2dda76f8270e084dd2c1133a5ac153ea3034da3168beb", 0xc7, 0x80000001}, {&(0x7f00000004c0)="8c3da3170d67dcf75722d8432885b58b56aa71c31ce3065e1226ddc62a628b0dac40b807735b6aec7b3ac4b7235cd71d65784f899ee0a2e8adf8138af28a3c53e089d14b1fc6a936ea420e470e1540d930695667f12589c0995c9cabe45e1bc9e0b902b9c670b7a8533fbd0d19291677128c670a6bbdd65b8ea8cef605fd9b2add865bdcdaf63c1f1ba6827ca069ad", 0x8f, 0xfff}, {&(0x7f0000000600)="ae24f98f226e63c4a8dd9e494a0ac6c9fd775f5146f405c6d6dc221ed1d5e070ee61fca46cebd6b0ca54f25fbc20541644948fceeeff1d0b6c888688a6dc1c0839f5247203514d1da45460f6852830cd157f2207b028f60da32127adf50ef816fb3fb0b6a907de92f899e97a57fc165b64fa90e502e404", 0x77, 0x8001}, {&(0x7f0000000880)="94a7cb72d7f73f72e8c6c77fa28f7b9de8ee23bb43a7ad094e77817c8f16d002308bca91203d4697cbaadbcd325ef79688416d60ff83ed0766e162d168507ca994acf5b0efb28976120574cdd10a2bf70534d7d10c872f0638f5fca1230c21cd73a5358565dad087d92c4d570aa62decd73cc05a9eadc4b362bc380665", 0x7d, 0x80000001}], 0x88010, &(0x7f0000000900)={[{@usrjquota}, {@abort}, {@test_dummy_encryption}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x200}}, {@errors_remount}, {@nojournal_checksum}, {@i_version}, {@nogrpid}, {@errors_continue}], [{@audit}, {@hash}, {@fsname}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', r4}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x2, 0x36, 0x1, 0x62, 0x34, 0x38, 0x38], 0x2d, [0x63, 0x64, 0x34, 0x37], 0x2d, [0x65, 0x30, 0x32, 0x31], 0x2d, [0x35, 0x66, 0x35, 0x5c], 0x2d, [0x63, 0x34, 0x34, 0x33, 0x32, 0x34, 0x64, 0x37]}}}]}) mknodat$null(r5, &(0x7f0000000240)='./file0\x00', 0x1, 0x103) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000740)='./file0\x00', 0x111202, 0x9c) sendfile(r2, r1, 0x0, 0xfffffdef) 04:29:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) openat(r0, &(0x7f0000000140)='./file1\x00', 0x402, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) syz_open_procfs(r4, &(0x7f0000000180)='wchan\x00') sendfile(r2, r1, 0x0, 0xfffffdef) 04:29:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6d6b646f73660376d10fcc2a58063cce03613afc650440002000f801", 0x1e, 0xffffffffffffffff}, {0x0, 0x0, 0x2800}], 0x40061, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0}, &(0x7f00000013c0)=0xc) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0xa5, 0x1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000, 0x1}], 0x2020, &(0x7f0000001400)={[{'vfat\x00'}, {'#[)'}, {'vfat\x00'}, {'vfat\x00'}, {',\\'}, {'$('}, {'^^-.$'}, {'\'#*'}, {'/!'}, {':\xe3-%#{%]'}], [{@pcr={'pcr', 0x3d, 0xa}}, {@euid_gt={'euid>', r2}}, {@hash}, {@appraise_type}, {@appraise}, {@seclabel}, {@appraise}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x40}}, 0x0, 0xffffffffffffffff, r0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3576.795842] loop1: detected capacity change from 0 to 40 04:29:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB='n/file0\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xee01, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) fdatasync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 04:29:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3576.908165] loop3: detected capacity change from 0 to 16383 [ 3576.954099] loop3: detected capacity change from 0 to 8 [ 3576.988105] loop3: detected capacity change from 0 to 16383 04:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) [ 3577.026259] loop3: detected capacity change from 0 to 8 [ 3577.037818] loop0: detected capacity change from 0 to 40 [ 3577.066162] syz-executor.1: attempt to access beyond end of device [ 3577.066162] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3577.068268] Buffer I/O error on dev loop1, logical block 10, lost async page write 04:29:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x2000000000000000, &(0x7f0000000a40)={[{@gid}]}) 04:29:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x81, 0x1aa, 0xd}, 0x18) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 04:29:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0xfffffff9) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000006c0)="cc41cbdec6c633e06ab90fb342a616b41b0a44d11117d9fae9b708ff2946e4ce5c403da8aed03e55a3568cb20332ca671c09e1286cabe1434a698ef0db36f8bef5af704d928a6741b711ad34da2950da156b4aa0de98453860d6923d8a2574e8315c8a9a9d34a14ae616f7c1429c710f6d47c6bd264e2913bcc3816b1aaeaf94fca9be9fe8882a83ba90cb8c67aaa3b18b8b43177148c82951e6355742496ea36a93f88be84fe9f673460add523f083a9cd1d421892ea2e6e6", 0xb9) listen(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[{&(0x7f0000000500)="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", 0x1a0, 0x4}, {&(0x7f0000000200)="ca4e4b395d4816c86939c1f9b84c245c5cecbda95826c62fb88ed4980b7919c3bdaed76ef0f42afb78a3097153b78f", 0x2f, 0x69}, {&(0x7f0000000300)="df4fb8e6b9b66d84ec7390eae4178f7c4cbd449f3368c4e6ac097239a4f5e2c180045a434ca4589e78dcdb68b37573df01a08c809b4ea4fb5a1ff284a591bb671676c7005d9d10b31388b265fcb5397b12fbf34d7e05ecc9a441426c78d0284071aeac4d8a2ad86e35c46406da2f1de550ae6a013dc83dfeed0c06616ce823876894fa2c438d05cb48ededa9c19ca0f009671b31712b8628e9e58048f87110e8538248a88683c0b2be2b362a4013418d4cf1117414e93e455efd8a9f6c033893648713700fb7288a2d78b231263947de492a33e1a1c93cbcc0176e", 0xdb}], 0x20002, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x206000, 0x7f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = syz_open_procfs(0x0, 0x0) fdatasync(r6) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) 04:29:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4350}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x4]}, 0x8) 04:29:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x2010000000000000, &(0x7f0000000a40)={[{@gid}]}) [ 3577.329249] syz-executor.0: attempt to access beyond end of device [ 3577.329249] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3577.331322] Buffer I/O error on dev loop0, logical block 10, lost async page write 04:29:51 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000001ac0)='./file1\x00', &(0x7f0000001b00), 0x80000, &(0x7f0000001b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@mmap}, {@msize={'msize', 0x3d, 0x101}}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x26}}]}}) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_procfs(0x0, 0x0) fdatasync(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x201, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pivot_root(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='./file1\x00') fspick(r1, &(0x7f0000001a00)='./file1\x00', 0x0) listen(r4, 0x0) writev(r4, &(0x7f00000018c0)=[{&(0x7f0000000300)="9faf641069ca189eab27ecd328e975a98d051eb15ab65f970807501867875e9e58cce7e7aa53e39856efcaf1d995f6a301cf20fc198cb6e785e2123c5c1241cde9a0b6b8130b1265d35e57fdf5027518400c83a600f7f29ddad0a2b20ddebba4018961a3f3dd740579399ab52e7414929dc9a3e9d53fe93269982bb34b27f0a5322d16c67d0695d08a836015a12d355c6d2706bf6677e33d231a2b79b4b568e3681513fac6e87a920b667fc793f7df623a0ce5db1e5b5c7525d05f91f2aaf9d799fd418fffa6ecc78deb0092c0f247b5ce", 0xd1}, {&(0x7f0000000140)="56dc2db2f751f5dc056c0cf1df3c3d89a771e7ea910b30507883b66a0b38d3c1068ebe4c22e7bcf667eb8810283a2098bba259ff7d6578996971000b02d24af292379bb36754ac725918ec59221008de54f3340134027d8fecff85350cd540a9ef3276b5d7e258b3fd6e56481f22276fe98e83aeae", 0x75}, {&(0x7f0000000240)="ec7c2a56c75bb60a9f3d6fba0b467ad248bcf3f67462d50b9265c71376b1d15366a1f1a50c1a619c9db5356937", 0x2d}, {&(0x7f0000000400)="bf0bb2c58ef8af37305d44729bc440cdeef382a6a8021f388fd9479d9d8376c6ec1409b07557f9d3016adf5471561db79b6d105e8b8c68d882b7f6416aaf92896d6d22c961269a981317a2003dee740d6ced3855404f5b5f4409e4ce9c00107833c86d3fcfa2f9ad18d8a5e306f0f33562530a220115fb46d65fe95b21b02fd5bd2bf1d0b78ec7394367887fe689db64430771e83f82", 0x96}, {&(0x7f00000004c0)="dce39ee8bf66b06904544c6fbde36d8fd267f05e17833c2d5539ce11d3cf1e015451b9ad38a3e7b266cb6a15ba394b826dbb88579d18ce428d4ea5f08f06ebe016024710cb91d6fb004dca062c6c1fd4b7db1be2f719a3bbbe6681fc921430c1f1fccf1ac6ca38dbc53f4a72f4010cf0804d8c5801c4472bb6aeb495aff4c9c4e645c955ad019ce030c06c465ebb3343a23f1afcf5806bc9622d4abdf9fdf9caf408b92514082a95561112e8ed305cb5f7bc707a0564c1fd8100c09304106fd8fd490c9968a2c0345c936b835715d866dad96e51fd16b2a56925da", 0xdb}, {&(0x7f0000001c00)="6024fc16c8fd3269a7ebca367337140fc22e51f1f5c1a178c3cc9c8d2bdd9c69e594a0dcad50461ace0e3ddf0be58112349ec7a47089e85127a2b1b9223e65333a49bd855e4254f389a83a46180b4f5d7690e93ee3c5dd881b6b68d1d6a3e97c3f", 0x61}, {&(0x7f0000000640)="dd70149380b9ca9e76df1127c18e3a157fad8965fa47fb0c509c511eff57706b436f8e6972bba717889205706823f6f331d29755b63760fa4c20b39df03f6636246eb0b5c1b682ffced6bd1ede574894f4e77ddbed180b8688c7fd695a71b35c4a6076c7c928bd58a1ac93058f5f92077e6af7676fcc87fc1e2d498acd12eb60f342e99b24ccb0478fb8423c40cc1d6fe4d0d93691b3b7023c6da38fa4b2ad7777f1c8c302c7af199a3160a963cb0350881e1bea0415fb29c2ff", 0xba}, {&(0x7f0000000700)="7925925ca4542ae531ef65ee5277357dfd37a11a9cc55386bc4692205a41e0573d829540719a6084ef0ff089c538124b12efa18b4f358a55dcb35d482e079533d67a446094f4b246465c3988656a22c0a661c1a0664c78d7872bb3ddf91408039e71d8fd3e1339cffe9b477b0d80bfaed1bf60ca5af3cb97c8f476285c612372bd74b0a069757f081d03cb10065afe205efa", 0x92}, {&(0x7f00000007c0)="877ef74f0527ef5edda8fff4598fa5c07853d6ee65d68cb4341c3e114cce3e42791982878f3e5533c0c3c7815b622144342f43340cd26e122f567a4e6078b9f50630c6da7b64dc3eac0b002712e7c492d17517c17424499a29d7d346f2c7736c72338c65f4f9d7942e5a7458d4bd769c2746805b270e11af2ffda28a36950d620915276631aff9f363e60e7a46433a833e8588e350b11677701a463117f1e73e874c05ee14ea575f2799374729b89fbeb8dc75201326955c3ec9c385c86f06020cb7", 0xc2}, {&(0x7f00000008c0)="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", 0x1000}], 0xa) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001a80)='./file2\x00', 0x4000, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r2, &(0x7f0000001a40)='./file1\x00', 0xee00, 0x0, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 04:29:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xfff, 0x1, &(0x7f0000000440)=[{&(0x7f00000003c0)="a3eff56a23a36eedb958abbabff405298e99e633316f91ec132da56d0a8f0fb3881cbc0ac0a9ee8d39a8fccf9b492fccb00eb9fdf9b16b1a9176dc46895c50e5ebd9ca8a335a30a0cc59ef39894620fe04d5fadafd541416e0386e035f0a14f363decc75451192ecd1cb", 0x6a, 0x5}], 0x900, &(0x7f0000001800)=ANY=[@ANYBLOB="76666174002c5d2e2b2d1d2c2d2c5c3a2c7375626a4f726f6c653d76666174002c736d61636b66736861743d76666174002c6d6561737572652c00e6c2c8e8d33fc4"]) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001580)={{{@in=@remote, @in=@private}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000001680)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f00000017c0)='./file0\x00', 0x200, 0x1, &(0x7f0000001540)=[{&(0x7f0000000540)="0cbc601c74c6530f8ec6b6f00b7e2aa160a8818270a909d27d636012c024ab34fec4442d427ad1cfbe4870d2497cd9a5b53f488024afe1a854abcf4ea4477b81f0a9e495e896126e3b6c82fea5d3fcdd40abfa18a189d9fdc7c159311ce4688b3f4b0e3a6d91e59d6f3de8e176ede38295091414db413e8f95bb74b35d1270dd0d3e13a9c3e6f308ae876f8773bdbcac160fc937dde7cdfb4333c0a0ead5df4f0469b00225464c48ed3358c983abced06904527fca248866090e1e3041a181436549f370e230175baa368f4f3864fa1ddca5672cea1bbc128b3415e0d756b7a3ff45fc31508937522904ce43c8590f49ce98060a02a127220ae94843b2a02c6c5e7baba1318e1375a3a3e2c0c2325d4991c40d638596cdb22d03e2795cd4ba930f03739178d9ab927094f4c9436f40320e6d423441ccea8866f115b50fc10f5d12b7bca23c4c3c8e5e2bf43e0fe1a2ac56c9053aa02efb873ef620bfdfd8903acaca8fbbd28a10c918cfa42b9c48a890ff986dfedd9a6847d0d0bd6d2dd687d6da00807bd40be4442bc10acdc34e7ebc7a2f9dec182d8ae2fe18aa13f660771557d0cfbd3d067567e176652f32d6e80df572743f12d9cf6804f8f301b711e577cc399f9cae97d496200607d09c5c33f820abd350c1c81bf1253569e97fd931530c152ead4ce81f910c663169f5ed36ef1102a5074643ec161e9f4ae0d5b52adae285e440617ae87c2ecadd0c06e501b7e2443f24c02c67255d05e290160be0be3bafc8fd4487fe0d72220a3cc7ed11dd2eda31d83fa1e4f70223a3467310906d282ea37d4ba3806efcc0a64e14fbe938dd2877d9e4819e4df6a4cfc9167cc1ae69b6e67a00f33d894df4e72c3e0a79f0e34c4cff64db5d8d2d78e1654f487da65443c5b079af69268f40a207e9067c3d162280a42ab5b439f0fa0faf143ed06f655fc486822b9cc54f81164fe7f23db7c051e8704716043d283ba881139a62285903ade1d0f8773ea6edda69ef9a947a80e14d7bdded266a5295ba65e20d3a413733559636b4d1c97894bcdca63c854762d54d0c9419e463c5cd071b3ed43d3b59c205ca4e928bd94a7668ce8ca38593df3504af64e9e1f28a4cfb1fae88296600d6b42254d888125bec541bf51028bc64a2dbb21900998a428703e2927e9010222a0c816177f40dfbd1676c9f835a5e052f39a51f72c58a58440358ef416847b489c9a868f8f741f1d86591fc74c55373761a6c10cea66b8c306d4300f89e89f456dec4d90f6ecd22214225d5907b8b149778067d6337cf18a5f6b2c9f8638ef4d2c4bdf167431265e5391f90b7ea26396b9965b47eb2dabc7040f628772d0881500cbafb58e01c0dcd6645cabb2a61c0c6028b7b393f470f645a074077716e7a005c2186c131512c5d627db361c9b470d41f6ec4c096cfe222a8b33c1e51dc1731938b130a80c5da2afc39f227e132aecd0217a31dfb90d23d781fdf711a52cd7ed1b346398001f9921d987ce2804912d32675ea70c9ad47c5d6d4f4266334d29350279a3991a6f074f1f8d0c96da212c73252c54d8e12ad46b13c22c95d3de4e96f9a2007eef45536500a3ef0f84b8cf4ae8ad5d01e5546d3697c9ddc3200023b735ef30fdc198e976c353011d5cc64252e1e66bd0670f1c668b63666fda3bab714c3a9fdd23390bff30aaeb23141b66baca93f8fb539b734ae4f9b526554dd1fe59959f20700cea49c7f00a1681055ce50719658e60d95ef32b58d48627fa486767b3ae560cf88b26b430dbdb48791fba587d63bfa224c3b0c77bb83d02f13355aa2996085e550f9728fa67ad5112d00a2dba11747a90182ac10d355503b365caed2101a5ca27daca768ba73ec9b341af9afa06ca4d396b3f700a5b623b77c676a5c2abb3a424204a17d10796dc60a209fe5407e9c5773f79030cd0d05c764189280e55027d88915143edfa85d3d73e899d48401fa79415155fe926757f821411603625de27a419bef5e8cc59997a3dded8d5e8d991ea1917afeb3c122f8f770a78f965acb02425833073990c502d2f35d34366f882a789318e24b17fae5ca801414a236d0a6121dc6abc361a5d8caf78bf668ff5e94303ce89d779e2a5c67339229810426082fd714084508d376161d8cf3df72b579747e64343c714ba85a56b996ef1a4e5f07855b9d2ea6aa099aac9b0f204c3a425591ef9b06d38357623aba9d338233557668c776ccfeb6110139e72a0c4f626c06d7b3e8df2be2679b913c8071d2bed030f930aa616e6a948c9bd52e1cc08b1c64eab7de9b625685f89dabb2efc144768170318258af40b394662f369ee0e1f9160135f3affafa2bbb459cdf0d0502f30b5ee9d1e013b169cc48b701732b0b2a3f186fe484f0fa6b2af30588c6f0348a92928a4ac8216335c029c36cdc246d7848f39555d197cda9ec428e7d3b2563dd61c89d57d3446286da780aeae4c08b177a7b996387f662a8143e557f054419ec2b9d7219af4d6b8f829551f9e7887518cf978d4a6e43ac8d2e2be136f1b2a64538688813e76db2021406fff826a4530694b6d4f7ef94fa87298046f402284d09e6f210f03c6fe3d825b2ac50f61990c944a91d54bf2e7d5b9777b4220f6c1eea1e721ac1a593b37363411813bc6cf50a0c3d70ec2e329e7ec9e73e6f8ea2a6dc15d7795d59717384859b784dca376a45f82e8004d7a8ea770f43393f50fa835ea5bd6aef679c952f46b5f43c4cb2d999a6025f8e8804ca2dd036a5e1bdad6d4d2ee195805df2b7048ccad946076247a78123c35858cde8c84d52a9a9bd03fdf68d5d3275fd2fd441928617127e359ea52eb6c730be2a3c84c7f07b6c48c73bcdb26ad92629218d058601cbb40d9f63ba7ea69c25dad14662ff2925e754b28ab771029fc6db33467e818c5f17a579dd1ed8504ad42ae1537c83291ba12ff64b65235a619858956cc47eb476aff460bc7e46ce90888e67cc4b0bb8dc2d551d22bfa158b1635d92a59378236b9494c4e5936883a75632f13c0dc91cd7082d0accfc8f67da9f92d83b382a65f65ebcc9e4fc6e05728031dcc8d6bf3f38accffe8ce1adc0a54c028eb9ebb0f76d468fb367893559a5491b4a0331c08236650f0b820992d7adc0fdf29856c9a664c1a249cad237e6c031e2b477b0a1377dc8074cd8c917b2a61b0799817d2f7d88488a9efd13f8c251e26ff85a8f862e6524188129a9041788a8436f9308cc7ff2ef9853f17be5224e5e16238db8f98b8991a44129f64d08f064463e06068cc395020cc12bd3ab0658715ea9dd33c10f0a9b3d09563ee776a81e188c672df58d130062ba0ec6e1bcbde98ebb3d8003d4347cf30d4ce81bb8e73fd6faf64fe05db2c3b6cb36f1562ea320a70920d4be5a595c463b091efbf1968ec4e5f45013c915fdac811060b3645fca338d5f64b97159f88609d3cbef7ff5aff015b5ed886b902fc55fc7d08acb15647b80e9516365197db3ae9d85fc4f1a4bdccebd6672d996f2d204158e4703c3dbf29b70623e0716f3644826e0aab14419a25638fc4b1a8447007292d1f798b77ec4f21190c069bcd9430dfca2d062b2b97e0527a0457a6ab2d6f11bd0ac63a610ad0e9d643f7160b09c06a11f5c7ba3ac50cd281983d2d191f4ece8aa19116049322f065459366c520609b8b931de7b56a032ea6fb9d82189d1dcae85f4afa6664855112f1e71fa5cc79d88c130bbe2e70a1cc0c382ce88421b56c8ca8eb7dec2111c5cf678064406764083a7f4f6f57e53ed88a1611e71ffd5235ae26f46c6c16f186277792f6b44f4f8e734ba14fcb85f9f52de192f204d5943871a9a7f078417bc60c0a66599e64de81f68293b2f72f620136274cff9ae4298410508a3a64d3c19db87834ae1c3fd9e01a5f622a256b32ed49bc73466d2bd494594e51d3175f66a2cf73c84c654458c5340929ce4ba0c7edec1882eaf4c8caa9631fc76accd038236e8237be07abd59fbaea75923a3034565670aa33302f967d9d9061cac8560c77eca50009bd9ddcdb5005dbf2d68e3b3ac35d1e27ef7f1031cb17c82c0eb4efbc1709d1ffd3a0bfa86b29d7d57ead6dc5eddaf116093b0b8196ee47e19f90a97d5ba4e0c602d83444c16d37f1c25001822e8ba0e0851c8a1142fae4c67532831204ab16bb9af092c6141581764de4dd74557058d2fcdff02bec9f178fd8b739d2055b34eac145ba52ba3d381bfdd7e0d0b401d58284fb283d97697cc5cd77c17f5d2bcce2b40ea4cb73cf69f316b323069ef5198478e450effb40955ecd5e313938d0d212decdc91143413dbcc218aab58b563ccb48cb40c5ddd0ca700603bf6cf4127a1ab62fa292f938117c2899cc1e9a9c1b96eb27ed3e742b16a35163f74a8a36f2097984b1f47838a4a364fdc99c3c9e4d5479b4b6f9fad98153df15af4446c9f8ebbc104eda6ed142e3b3ef1769c07eb08d1d42b26ca3216438d04f874419d4f0fc1fd9a51d875e9872a6ac733b0588d209d551a6cef662734c94e54066c7c1f27610e5a815a460d29a2088612a0d922d2f48b8bb7b156f0ff7ead345f0764c9ffeaf66b87c4ef84d45f08a73460a3233c90c76b2470b95bb144d1f9db048446625e9e90352ace6c8d4bafc405b956f02ece0163442e2682bc60a18395a8e31ebcdc3c862d42b9c8060e4c7535f1adbd2e6e863064abaeb41a60e3deea6bfe1afcb30174d37586193c1af7814f5944112050eefb3b2f37362864ffa277496cf3a27d6b518078de6453c1e94413106fd7d5f354e191b42da0bbbf2cba0891ff4eab2a8c289faf31497dd04a7038b6cc9b4eda486b9b1fa264c0fc3ec1275fc082cb828f2d27d4728c39e7904a5ddc4b408312bb64732ade92960c8b3145fd015829fa7b22cf6d4d25559cac01003c3e5e9d1e52127632d6c8cd15f10348823ef9200dff85116a4ed348e95589923cb67529939aaf84f5a86d9ecd6a9f7cefafaf8469140cb83a443977d644e91cc4bf924fb3273fa464d91ad3e173e0e54f6ac1aaddd72ec586873ee79bad78c9edad714d8adb3f45f63432c69181e9968ba5fc6942ca2c5b077e3073f8def1ea2b8957434b65844e490c537513960f762116133d613a3ab27726d6679397300c679a043b30c37a503481345129a5fcd8a01d9105c2cfe5f5c5c7096ddd49d712bef4cc0237de99857dbbd84add0b413f7add6e47b1d5719a2ea0b926499800aad12079f07e0162156986ddc1502604f2004b6cd81b5edbacf7b429c8e6e924f50fe2d79fc545eac27d05626346f7a1456ddbcc1a5e223fb8644605040c0667a04f6e46caf5392550448192614de2caca2f8cc637272deb87fadf2f9808959e4fd47cd04dd98381fb1e627802c52b4b5699e3e6f35d0ea89aea7202bddb678681bf723db635698fdf1b7786bc94cf0d7f2db6ad5b44f56303347a0892ce38b64a39afe18d31aeee9d1562307445f2baf56e72ecb6e1db9baf1cb6999f25d89cc8cd1244e13ec57f68d9fae23608172cd8ef8656e077b7f0bd0afd88429e9edbee865e4cff8cf23391a47ae26950bb344311d9f18003abb20e0c97f7f2415e5a9a848cfebe35ac10a1d264c91e26ec104916c4c3f75cd082daf4ced99eaa95391562d8205f2cfcef8fd99770e8f5a0f1b6f55d8e012cede59af3c68333aeb6305711082aa762c9bd5f5bc8070143cd2ec660d139c95a2260fac2d0ba79f19740a616700fd8f38ba116668c763c233adb9b512da6cac8fc53ee4844b715afc62b8794f78005466f84db70b33f17aedfaf09bfb8", 0x1000, 0x2400000000000000}], 0x301040, &(0x7f00000016c0)={[{@huge_advise}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x39, 0x66, 0x31, 0x30, 0x39, 0x65], 0x2d, [0x32, 0x36, 0x65, 0x2], 0x2d, [0xf8, 0x30, 0x37, 0x66], 0x2d, [0x38, 0x38, 0x30, 0x30], 0x2d, [0x32, 0x61, 0x33, 0x0, 0x65, 0x30, 0x35, 0x32]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x66, 0x37, 0x32, 0x0, 0x32, 0x61, 0x39], 0x2d, [0x38, 0x63, 0xfa, 0x38], 0x2d, [0x33, 0x38, 0x0, 0x65], 0x2d, [0x61, 0x62, 0x30, 0x63], 0x2d, [0x0, 0x65, 0x38, 0x62, 0x31, 0x66, 0x62, 0x32]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x35, 0x64, 0x32, 0xfd1f9b4908d21bef, 0x34, 0x31], 0x2d, [0x38, 0x31, 0x2, 0x65], 0x2d, [0x32, 0x61, 0x31, 0x34], 0x2d, [0x39, 0x39, 0x38, 0x50], 0x2d, [0x62, 0x34, 0x65, 0x65, 0x33, 0x39, 0x37, 0x63]}}}, {@euid_eq={'euid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, '\\:'}}, {@uid_lt={'uid<', 0xee00}}, {@permit_directio}]}) r3 = openat(r0, &(0x7f0000000300)='./file1\x00', 0x101042, 0x0) r4 = syz_open_procfs(0x0, 0x0) fdatasync(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000140)="1fb85f8fba06647cad6b11eacc6510c05665d4e8fd68cc8036532b8b7071d03051927a7a1f5d86dc", 0x28}, {&(0x7f0000000200)="026922065f1e741cc36bc83b696ea3ca10f56901899d17906831ae1c87d96f7ef0138970b69633cd453d7893836c017d5abb278dadb5d7486fc13c5a31d4d95c550a466474cfbbb33ce132bc3ded89e4", 0x50}], 0x2, 0x0, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000500)=0x6, 0x4) sendfile(r3, r1, 0x0, 0xfffffdef) [ 3577.445121] loop3: detected capacity change from 0 to 40 [ 3577.504292] loop7: detected capacity change from 0 to 40 [ 3577.527305] loop1: detected capacity change from 0 to 40 [ 3577.538762] FAT-fs (loop7): Unrecognized mount option "net/tcp" or missing value [ 3577.637198] syz-executor.3: attempt to access beyond end of device [ 3577.637198] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3577.639618] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3578.309496] ================================================================== [ 3578.310562] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 3578.311460] Read of size 8 at addr ffff88800e6b0be8 by task syz-executor/14129 [ 3578.312399] [ 3578.312631] CPU: 0 PID: 14129 Comm: syz-executor Not tainted 5.19.0-next-20220805 #1 [ 3578.313659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3578.315183] Call Trace: [ 3578.315542] [ 3578.315860] dump_stack_lvl+0x8b/0xb3 [ 3578.316412] print_report.cold+0x5e/0x5e5 [ 3578.317000] ? __lock_acquire+0x42c9/0x5e70 [ 3578.317593] kasan_report+0xb1/0x1c0 [ 3578.318123] ? __lock_acquire+0x42c9/0x5e70 [ 3578.318738] __lock_acquire+0x42c9/0x5e70 [ 3578.319330] ? lock_chain_count+0x20/0x20 [ 3578.319899] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3578.320627] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3578.321330] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 3578.322001] lock_acquire+0x1a2/0x530 [ 3578.322531] ? kmemleak_scan+0x21d/0x16f0 [ 3578.323099] ? lock_release+0x750/0x750 [ 3578.323667] ? mark_held_locks+0x9e/0xe0 [ 3578.324371] ? call_rcu+0x589/0xa30 [ 3578.325252] ? call_rcu+0x589/0xa30 [ 3578.326096] ? _raw_spin_lock_irq+0x41/0x50 [ 3578.326702] _raw_spin_lock_irq+0x32/0x50 [ 3578.327290] ? kmemleak_scan+0x21d/0x16f0 [ 3578.327850] kmemleak_scan+0x21d/0x16f0 [ 3578.328394] ? paint_ptr+0xc0/0xc0 [ 3578.328886] ? strncpy_from_user+0x204/0x3e0 [ 3578.329486] kmemleak_write+0x570/0x680 [ 3578.330026] ? kmemleak_scan+0x16f0/0x16f0 [ 3578.330602] ? debugfs_file_get+0x1ce/0x450 [ 3578.331194] ? debugfs_file_put+0xd0/0xd0 [ 3578.331759] full_proxy_write+0x11d/0x190 [ 3578.332318] vfs_write+0x2cb/0xd90 [ 3578.332808] ? full_proxy_poll+0x180/0x180 [ 3578.333387] ? __ia32_sys_pread64+0x220/0x220 [ 3578.334010] ? lock_release+0x3b2/0x750 [ 3578.334567] ? __up_read+0x192/0x730 [ 3578.335096] ? handle_mm_fault+0x6fd/0xa20 [ 3578.335687] ? up_write+0x480/0x480 [ 3578.336199] ? __fget_light+0x212/0x280 [ 3578.336760] ksys_write+0x127/0x250 [ 3578.337276] ? __ia32_sys_read+0xb0/0xb0 [ 3578.337844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3578.338549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3578.339280] do_syscall_64+0x3b/0x90 [ 3578.339803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3578.340534] RIP: 0033:0x7f198cf215c3 [ 3578.341052] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 3578.343493] RSP: 002b:00007ffea746b278 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3578.344521] RAX: ffffffffffffffda RBX: 00007ffea746b8b8 RCX: 00007f198cf215c3 [ 3578.345476] RDX: 0000000000000004 RSI: 00007f198cfd7ed9 RDI: 0000000000000003 [ 3578.346441] RBP: 0000000000000002 R08: 0000000000000df9 R09: 00007ffea75e6080 [ 3578.347420] R10: 00007ffea75e6090 R11: 0000000000000246 R12: 00000000fffffff6 [ 3578.348380] R13: 00007ffea746cef1 R14: 0000000000000000 R15: 0000000000369711 [ 3578.349358] [ 3578.349674] [ 3578.349905] Allocated by task 127: [ 3578.350378] kasan_save_stack+0x1e/0x40 [ 3578.350909] __kasan_slab_alloc+0x66/0x80 [ 3578.351455] kmem_cache_alloc+0x1b1/0x4a0 [ 3578.351997] __create_object.isra.0+0x3d/0xc10 [ 3578.352610] kmem_cache_alloc+0x24b/0x4a0 [ 3578.353152] __alloc_file+0x21/0x240 [ 3578.353657] alloc_empty_file+0x6d/0x170 [ 3578.354199] path_openat+0xd4/0x2800 [ 3578.354701] do_filp_open+0x1b6/0x410 [ 3578.355232] do_sys_openat2+0x171/0x4c0 [ 3578.355761] __x64_sys_openat+0x13f/0x1f0 [ 3578.356303] do_syscall_64+0x3b/0x90 [ 3578.356806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3578.357500] [ 3578.357732] Freed by task 19: [ 3578.358158] kasan_save_stack+0x1e/0x40 [ 3578.358708] kasan_set_track+0x21/0x30 [ 3578.359269] kasan_set_free_info+0x20/0x40 [ 3578.359858] __kasan_slab_free+0x108/0x190 [ 3578.360439] kmem_cache_free+0xfb/0x610 [ 3578.360989] rcu_core+0x7e2/0x2080 [ 3578.361487] __do_softirq+0x1c8/0x8d0 [ 3578.362017] [ 3578.362257] Last potentially related work creation: [ 3578.362931] kasan_save_stack+0x1e/0x40 [ 3578.363479] __kasan_record_aux_stack+0x97/0xb0 [ 3578.364128] call_rcu+0x6a/0xa30 [ 3578.364616] kmem_cache_free+0xc1/0x610 [ 3578.365176] rcu_core+0x7e2/0x2080 [ 3578.365673] __do_softirq+0x1c8/0x8d0 [ 3578.366214] [ 3578.366458] Second to last potentially related work creation: [ 3578.367262] kasan_save_stack+0x1e/0x40 [ 3578.367813] __kasan_record_aux_stack+0x97/0xb0 [ 3578.368477] call_rcu+0x6a/0xa30 [ 3578.368946] kfree+0xbb/0x5e0 [ 3578.369383] ieee80211_ibss_rx_queued_mgmt+0x1abc/0x2f80 [ 3578.370126] ieee80211_iface_work+0x9c5/0xc80 [ 3578.370770] process_one_work+0xa0f/0x1690 [ 3578.371355] worker_thread+0x637/0x1260 [ 3578.371912] kthread+0x2ed/0x3a0 [ 3578.372390] ret_from_fork+0x22/0x30 [ 3578.372913] [ 3578.373150] The buggy address belongs to the object at ffff88800e6b0bd0 [ 3578.373150] which belongs to the cache kmemleak_object of size 368 [ 3578.374848] The buggy address is located 24 bytes inside of [ 3578.374848] 368-byte region [ffff88800e6b0bd0, ffff88800e6b0d40) [ 3578.376391] [ 3578.376631] The buggy address belongs to the physical page: [ 3578.377382] page:0000000025e39794 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe6b0 [ 3578.378612] head:0000000025e39794 order:1 compound_mapcount:0 compound_pincount:0 [ 3578.379639] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 3578.380441] raw: 0100000000010200 ffffea0000269780 dead000000000004 ffff888007c4f780 [ 3578.381502] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 3578.382540] page dumped because: kasan: bad access detected [ 3578.383305] [ 3578.383541] Memory state around the buggy address: [ 3578.384197] ffff88800e6b0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3578.385194] ffff88800e6b0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3578.386185] >ffff88800e6b0b80: 00 00 fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 3578.387202] ^ [ 3578.388135] ffff88800e6b0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3578.389158] ffff88800e6b0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3578.390186] ================================================================== [ 3578.391210] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 04:29:52 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82409281 RDI=ffffffff8762a640 RBP=ffffffff8762a600 RSP=ffff8880449c7268 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff8762a600 R14=0000000000000010 R15=ffffffff82409270 RIP=ffffffff824092d9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555924400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f602a03a718 CR3=0000000044b2a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 df88f0a35bdfef0f 42fdd03a98ac9494 YMM02=0000000000000000 0000000000000000 085b5933ca63470b a5c916fd90c28e6c YMM03=0000000000000000 0000000000000000 821ba86861952c59 f86d9899940627cc YMM04=0000000000000000 0000000000000000 830a8a578d98879c 690413421e4f81bc YMM05=0000000000000000 0000000000000000 cd0e60af3b9c4156 6530b12068ab6319 YMM06=0000000000000000 0000000000000000 821ba86861952c59 f86d9899940627cc YMM07=0000000000000000 0000000000000000 5a4fcc0acf1f402d 3555bf6dee5b1594 YMM08=0000000000000000 0000000000000000 46ceed9d4d4fbda8 34ec83af129b7ec6 YMM09=0000000000000000 0000000000000000 3a0ad086b1fcf6ae a90d21d7068c79cc YMM10=0000000000000000 0000000000000000 7a925fdb6f9be772 5ad045cd43c0bb16 YMM11=0000000000000000 0000000000000000 6d3e4c835da4cbc7 233c3d60e66c903f YMM12=0000000000000000 0000000000000000 5113ab2706bee965 abb9cc69eaa02e94 YMM13=0000000000000000 0000000000000000 c0117b80df013104 bc9d0146a5b6d082 YMM14=0000000000000000 0000000000000000 2d9c713636bafca9 8fe4763d0bc8d8bb YMM15=0000000000000000 0000000000000000 f58db1b50bd3cf6d 115e0ce19fd0b1f2 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880187af7a8 RCX=0000000000000000 RDX=0000000080000000 RSI=ffff8880187af7a8 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffff8880187af6c0 R8 =ffffffff85e12a38 R9 =ffffffff85e12a3c R10=ffffed10030f5eef R11=ffff8880187af750 R12=ffffed10030f5ee4 R13=ffffed10030f5ee3 R14=ffff8880187af758 R15=ffff8880187af710 RIP=ffffffff8111b88a RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f388f8588c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056288e61daa8 CR3=000000000de1a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 0000000000000000 000033706f6f6c2f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 000056288e5db7a0 000056288e60f450 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000300000004 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000