t_aout(r1, 0x0, 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0x0, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:47 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x3e00}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:30:47 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0) r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r4, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/125, 0x7d}], 0x6, &(0x7f0000000800)=""/39, 0x27}, 0x0, 0x40000001, 0x1, {0x1, r9}}, 0x2) r10 = epoll_create(0x1) r11 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)={0x20000017}) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r12, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa22a5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r2, 0x0) dup3(r0, r10, 0x0) 22:30:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x5, 0xfffffffc, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7800, 0x80, 0x0, 0x800}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}, 0x14) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) openat(r4, &(0x7f0000000180)='./file1\x00', 0x200, 0x72) 22:30:47 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RREADDIR(r1, &(0x7f0000000240)={0x87, 0x29, 0x1, {0x5, [{{0x8, 0x3, 0x5}, 0x9, 0x4, 0x7, './file1'}, {{0x2, 0x4, 0x80000001}, 0xc94a, 0x1, 0x7, './file0'}, {{0x1, 0x0, 0x8}, 0xe772, 0x4, 0x7, './file1'}, {{0x8, 0x3, 0x2}, 0x9, 0x20, 0x7, './file0'}]}}, 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x82a40) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x33) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000040)='./file1\x00', 0x200080, 0x134) sendfile(r4, r2, 0x0, 0xfffffdef) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x48080, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f00000001c0)='{-\x00', &(0x7f0000000300)='./file1/file0\x00', r8) [ 2684.277602] syz-executor.6: attempt to access beyond end of device [ 2684.277602] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2684.278639] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:30:47 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x3f00}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:30:47 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x5, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r5, 0xfff, 0x3, 0x8001, 0x0, 0x1, {0x1, r9}}, 0x10000) 22:30:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2684.557203] loop6: detected capacity change from 0 to 39 [ 2684.620738] loop5: detected capacity change from 0 to 39 [ 2684.666747] syz-executor.5: attempt to access beyond end of device [ 2684.666747] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2684.667881] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2684.695684] syz-executor.6: attempt to access beyond end of device [ 2684.695684] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2684.696606] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:31:03 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x4800}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x5, 0xfffffffc, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7800, 0x80, 0x0, 0x800}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}, 0x14) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 22:31:03 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0x6}}, './file0\x00'}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22:31:03 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) syz_io_uring_submit(r8, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0xa, 0x1ff, 0x0, 0x4, 0x2}, 0x0) dup3(r0, r1, 0x0) 22:31:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:03 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:31:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0x0, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2700.106441] loop6: detected capacity change from 0 to 39 [ 2700.124603] loop5: detected capacity change from 0 to 39 22:31:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x5, 0xfffffffc, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7800, 0x80, 0x0, 0x800}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}, 0x14) [ 2700.282184] syz-executor.6: attempt to access beyond end of device [ 2700.282184] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2700.284184] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2700.325197] syz-executor.5: attempt to access beyond end of device [ 2700.325197] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2700.327291] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:03 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x4c00}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:03 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) sendto$packet(r2, &(0x7f0000000180)="22da45eaae85f6c6d1e9f8087acbb9725bb8a3d474ca8cc99285e806a3a72107ad2e4bdb78088bd541200e0e15798329f87e1115ccda5004bef13dca27152f2eae119e9d30934a7fd637b12df6f2e603ad86fe3f45f900fd02c70ff1fb7e2980bce3ba1de241b65afc75302f2c30e810ca42822eb251951dd1adc26d61ca594780d584a145f05a524da4f3ad04640d293e0b9d33a43832fe61737f", 0x9b, 0x4008004, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:31:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2700.542352] loop6: detected capacity change from 0 to 39 22:31:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:04 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x2) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2700.728093] loop5: detected capacity change from 0 to 39 [ 2700.799410] syz-executor.6: attempt to access beyond end of device [ 2700.799410] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2700.801448] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2700.865693] syz-executor.5: attempt to access beyond end of device [ 2700.865693] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2700.867037] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:04 executing program 3: r0 = syz_io_uring_setup(0x581a, &(0x7f0000000080)={0x0, 0x1f65, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x499d, &(0x7f0000000180)={0x0, 0x3cdd, 0x2, 0x1, 0x3d7, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x80000000}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000011e00)) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(r0, r0, 0x0) 22:31:04 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x6084}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2701.047711] loop3: detected capacity change from 0 to 136 [ 2701.075058] isofs_fill_super: get root inode failed [ 2701.102399] loop5: detected capacity change from 0 to 39 [ 2701.156594] loop3: detected capacity change from 0 to 136 [ 2701.219063] isofs_fill_super: get root inode failed [ 2701.255252] syz-executor.5: attempt to access beyond end of device [ 2701.255252] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2701.257483] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) dup3(r1, r3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2714.074261] loop6: detected capacity change from 0 to 39 22:31:17 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x508, 0x100, 0x1}, 0x82) r3 = epoll_create(0x1) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x20000017}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r3, 0x0) 22:31:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0x0, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:17 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x6800}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:17 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x10d400) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000040)={0x10001, {0x2, 0x9, 0x6, 0x10000, 0x1ff}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8e29, &(0x7f00000001c0)=[r1, r5, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x2) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r6, 0x0, r7) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r7, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000011c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd_index=0x8, 0x7, 0x0, 0x0, 0x18}, 0x2) dup3(r0, r1, 0x0) 22:31:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x0, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2714.106237] loop5: detected capacity change from 0 to 39 22:31:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2714.240329] syz-executor.5: attempt to access beyond end of device [ 2714.240329] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2714.242306] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2714.251132] syz-executor.6: attempt to access beyond end of device [ 2714.251132] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2714.253220] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:31:17 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000300)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5000007, 0x810, r6, 0x8000000) syz_io_uring_setup(0x5efa, &(0x7f0000000000)={0x0, 0x93de, 0x20, 0x0, 0x2, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(r7, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x80010, 0xffffffffffffffff, 0x539bb000) dup3(r0, r1, 0x0) 22:31:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x0, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:17 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x6c00}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2714.445009] loop5: detected capacity change from 0 to 39 22:31:17 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x390c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x3, 0xfd94, 0x0, 0x0, 0x1a, 0x0, {0x1}}, 0x7) dup3(r0, r2, 0x0) [ 2714.538744] loop6: detected capacity change from 0 to 39 22:31:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2714.573525] syz-executor.5: attempt to access beyond end of device [ 2714.573525] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2714.575321] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2714.716371] syz-executor.6: attempt to access beyond end of device [ 2714.716371] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2714.718476] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0x0, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='*:,+[\x00', &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='$^\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='vfat\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00'], 0x400) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r0, 0x0, 0xfffffdef) 22:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2727.033370] loop5: detected capacity change from 0 to 39 [ 2727.035209] loop6: detected capacity change from 0 to 39 22:31:30 executing program 4: r0 = syz_io_uring_setup(0x622c, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d80)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=@caif=@util, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/102, 0x66}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/206, 0xce}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000000b00)=""/245, 0xf5}], 0xa, &(0x7f0000000cc0)=""/128, 0x80}, 0x0, 0x40000020, 0x1}, 0x2) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r5, 0x0, r6) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) openat(r6, &(0x7f0000000000)='./file1\x00', 0x141042, 0x1f) pivot_root(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file1\x00') syz_io_uring_submit(r1, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/77, 0x4d}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000180)=""/22, 0x16}], 0x4, 0x8, 0x1}, 0x2) dup3(r0, r2, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x8, 0x18248, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x1600, 0x9, 0x1, 0x3, 0xfffffffeffffffff, 0x2bfae0bf, 0x4, 0x0, 0x3, 0x0, 0xa8}, 0x0, 0xc, 0xffffffffffffffff, 0x8) 22:31:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x7400}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:30 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:31:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x0, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) openat(r4, &(0x7f0000000040)='./file1\x00', 0xc000, 0x89) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) inotify_init() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2727.183062] syz-executor.6: attempt to access beyond end of device [ 2727.183062] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2727.184354] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2727.187649] syz-executor.5: attempt to access beyond end of device [ 2727.187649] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2727.189091] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:30 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x7a00}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd_index=0x1, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f0000000300)=""/157, 0xad}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:31:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x0, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:30 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r5 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x280800) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000180)={0x80000000}) r6 = syz_io_uring_complete(r1) epoll_pwait(r6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x6, &(0x7f0000000240)={[0x9]}, 0x8) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 22:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) socket$inet6(0xa, 0x1, 0x0) inotify_init() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x0, 0x0, 0x800, 0x3, 0x3, 0x0, 0x80, 0x40, 0x2fb, 0x7, 0xd00e, 0x38, 0x1, 0x0, 0xd0, 0x5}, [{0x6, 0x3, 0x7, 0x5, 0x4, 0x1, 0x7, 0xdf1}], "847f8a72336d2448919f96f8196e07813581510e2e9ca31cc05bfc54d861bd3f0e0f00ea04bbb47297158f49e4e3d5c146211c0b06ee2f251bf884427fea2156012f03ea7734e5d31e6270a35b3190d73f364514381ef96ec8fedb491f5e099a585d7de26e5bd6d1554438"}, 0xe3) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2727.425144] loop6: detected capacity change from 0 to 39 [ 2727.443694] loop5: detected capacity change from 0 to 39 [ 2727.558110] syz-executor.6: attempt to access beyond end of device [ 2727.558110] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2727.559488] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2727.748671] syz-executor.5: attempt to access beyond end of device [ 2727.748671] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2727.751379] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:44 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e3}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) tee(r0, r1, 0xffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) 22:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:44 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x1e0a, &(0x7f0000000000)={0x0, 0x759f, 0x8, 0x3, 0x1ea, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x400) fcntl$dupfd(r5, 0x0, r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r2, 0x0) 22:31:44 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r0, r1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) connect$inet6(r5, &(0x7f0000001440)={0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) r6 = socket$inet6(0xa, 0x1, 0x0) process_vm_readv(0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000200)={r1, r1, 0xfffffe02}) r7 = dup3(r5, r6, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_io_uring_setup(0x43ba, &(0x7f0000000000)={0x0, 0x6e47, 0x4, 0x2, 0x1bc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 22:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) socket$inet6(0xa, 0x1, 0x0) inotify_init() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:31:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x0, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2740.669464] loop5: detected capacity change from 0 to 39 [ 2740.674008] loop6: detected capacity change from 0 to 39 22:31:44 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e4}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:31:44 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) socket$inet6(0xa, 0x1, 0x0) inotify_init() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2740.816110] syz-executor.6: attempt to access beyond end of device [ 2740.816110] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2740.818182] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x81, 0x8100) openat(r0, &(0x7f0000000080)='./file1\x00', 0x101000, 0xa) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:31:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x0, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:44 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000900)={0x4, 0x4a171c9b, 0x1a}) pwritev(r7, &(0x7f0000000700)=[{&(0x7f0000000000)="6c3206b106353c20edd44fcf27ce6751f04cd9217451cee647ae239a2f0826e87c7b57c3e6ab11390a0069909a465eae6ebb3d4601317aa2a3ab92e86ce5e01ec9e816aefa77fa66cf3e29abfb999d8992e6c11b4f290c5465c066a766faead50cd96eefc935d527ea8ea0c3b099723aaa6b755ceaed3a0c4a32", 0x7a}, {&(0x7f0000000180)="c8a8fc01ea309265ccc061861e3222eb88bd455dae6de306967209970fe14738f79718353b091bc737ef51a3f97471a2c9861f76bacb5f033875d816ac93fed2cb62705823b041cb47c786d55c3e47fd1a78f1879f0006449b9fefb9e364bdce7a012b503f649d0cbcfe8808ecba5fba40830c80e0842594562f64cc8fa9dee0c01a3b07ad4537431b9d4670d29da4b0e0b42662a311972ea4034b46e0132e963ffae0fad56eba0e1a09bb9b81a7ef658eab4174bff2ba7adb3e175b28acc5054c258233cb82f76a358f331320c87ca8b709b3c58efc8aa33a95e2dfda4044bcace62828c6ad95aefff30d94753650", 0xef}, {&(0x7f0000000300)="2a665bb1ae48cde33c60b0ac43374363edbd758698e761fd4fe520e398567c2bf1f2f325e6791bcb027031e741db8a1b16634a18f304f5be9c139298252557207679a693f019c320ed47ad6401181f06b3a2b44d1fa453ef2790ddb301c1fd98c7fd7906100e3d04f2c4d78d9c2dff8ec78ad62e0cfae1786c96c023bd3931e4f72aeaa435b9e6c1a5300ab4295a32d4de4ebae8c890a27d00d332a80887", 0x9e}, {&(0x7f00000003c0)="5f644690b9b02fa870b92fe202a175412cc856cab2a911dde31dc8477dfed7cddec277b43fd7c682f1e42ce2fed63d2b02fd8335391c3922fa57a54c6346425004f62e2c3bfdeaf466b8796973123175e6cc3f02bfdf5a83b72fa9681223fdd67501e822e77ce63abbb810655970bd1ba5be1e97595a06ee3dca41468996f2d1a9fbbc88ca6204a1fb78084f7d379bf4da08a21f5d74819b4199dce2da7814aefc2565671d1149235d7939ff1f102d2c50e8955d26eeeb0b7be770149b8b59b11f1711370cde603a5aefd2a3ca69fa99b22e0b6bdcce9f8b11f6f97924ea45eb75f7ba34a26d", 0xe6}, {&(0x7f00000004c0)="78075cb4d149193234066c6da838649fa57b56f3e0524b991919ec01067a94ac67307bd3e91d0d0a10a511d880360505ae012cfc7b92fde02ccf9b665299cbc148da97c17f29280d436084703e5fcf6fac43e72382e3bd0c8623188b698006b1a436850c7e824afe492d7147d8445ac6045c2a4a28399319f8636ea7", 0x7c}, {&(0x7f0000000540)="63ca5d40a70d04f8abe3bcf63cf03881bb62a875f305b132da9878997398726217e9904793af19269d2bf227bd599518c1c3f4b10686ea6083d693455af356617581dd998fc0a13c75aaba1366101ede9993ca82d4be3a93870296de2a092b4cbb282ba858fe791727a6b0f9990a2d455a3d87291ff65bec8dd7148586a8d10fbcf837d4034000a8358eebbe2a610afea2159d2db4d448c3bfc6251f308d967f", 0xa0}, {&(0x7f0000000600)="9476fa94f4ffe638bd40f02d0b726068f2786bb11b871021b44fdc73fadc924a2e2c8a431cd40e38ca7cdfbf308be40514c8a5765413b178196a32e490d924d69d19f7613178f44eb4ba0969543859acbd32c264e1ae44dae7217781b414f5e65fcbc069655c6fc21618b8a00fbe2c12da3e7fdae2bb2397fbce03732965e745a74c3130b4305ecdb2b5acba6cbabc35f38dd5001d1ccb572d24a84efbd03a2d68c338fcd12dc2", 0xa7}, {&(0x7f00000006c0)="b4760e901fe9f0bd8c97163e5dcca1904d4ad996aaf924f292dae051a699f03831f76817fd", 0x25}], 0x8, 0xfffff801, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000980)=ANY=[@ANYBLOB="8000000000000000810000000000000001000000030000000600000000000000f900000000000000060000000000000005000000000000ffffffff0000000000000000000000000000000000000000000000000000000000be0000000000000001040000000000003f000000000000000000000000000000000000000000000081240000000000000000000000000000ff070000000000004a0000000000000002000000001a000000000000000000000000000000000000060300000000000000000000000000000000a0bf0000000000000200000000000000000000000000000000000000000000000000000000008e0500000000000000000000000000003f000000000000009d00000000000000018000000000000000000000000000000000000000000000010c000000000000000000000000000000d1000000000000f8ffffffffffffff97000000000000000000000000000000000000000000000002010000000000000000000000000000ecd5f0b56decb214948b4b1b6e5eea7c7874899b43344e553968543b922b704099e8d35abc09b74fcae684c6836e2329b75e933b5d1803a653fe257c29aa10ae1919ac46ff4d6d3c4166915146c0f58e2ed57f70afb299735821a987dde9f1c4126042e0844e2140e8411077245b4deb596b577f1308a58fdb525919ad454e6e"]) syz_io_uring_submit(r6, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2741.055608] loop6: detected capacity change from 0 to 39 [ 2741.129414] syz-executor.5: attempt to access beyond end of device [ 2741.129414] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2741.131599] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2741.241423] syz-executor.6: attempt to access beyond end of device [ 2741.241423] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2741.243483] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) socket$inet6(0xa, 0x1, 0x0) inotify_init() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e5}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:00 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd=r1, 0x7f, 0x0, 0x0, 0x6, 0x1, {0x1}}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f00000014c0)="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", 0x1000, 0x583c, 0x0, 0x0, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000480)="26d609990e178ed2aba6e5722c085eebed2f93c5f984633d763451049785b6288aae57d67f47d22b8dab2b63b5afb27aff255bfd6851245fa9a31348a0296a33a14edf3734620e972f90669cd10e3cebcb7d5841299ef0423236de621db2a17a21a1e077db0bc39c6ee6fdebeae52f714d6f886243e853422d4bdf28dfcfffee0717", 0x82, 0x3, 0x0, 0x0, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3ff, r0, &(0x7f0000000580), 0x0, 0x14000000, 0x0, 0x0, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x4, 0x200, r0, &(0x7f0000000600)="bc37ee6624104f9b9dab2ad16b5b52c58eb692", 0x13, 0x3, 0x0, 0x2}]) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0xc7, 0x1f, 0x8, 0x1, 0x0, 0x5f, 0x800, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x956d, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x100, 0x57d, 0x4, 0x0, 0x1, 0x3ff, 0x8, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, r6, 0xa, 0xffffffffffffffff, 0x2) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="75a5fa2ef2c20de57c01bd6ef598220b33e1a521cc5080774a1963c509e25081d25fa61b561060a4aa44212a5cb619b5a8ef37bfc39f816f1f85f91303ffb8df911cdc6cda36cb76d9911d8e6d09e26f5688b6d0637ca5c274b8ebf60e05f64fd67a2a", 0x63}, {&(0x7f0000000300)="3ad7b5e56531473319aca810136ab1e928af302bc4f72b3d827409ed272d737a388407879dbe4c17bc3addcc6013595739f3c47459679120d54f0e8af07524a6499afe73c81c51bc001db65975e5ed82cfe2d1c6a51d08d65cc1b7af42d33f3dc8a637c2227181ac9eab4c6ebd23afd71f4e55bd", 0x74}, {&(0x7f0000000380)="388ac1fbac58840e57feea4e3620170c65fcfe3062287bc167861136b8b8ae33f40a30429111f871d4b59a3542b4deb9d48a10c26f7e77a6e2b978ea0fc23198354286d31cab99881dcdd7d0104998f876629e2252b15163c0cb7160a5fcaa62c10c14a84bd78b47927e965c73482ce3150ba34539db33a7d25e688cc0d859978aeb", 0x82}], 0x3, 0x6, 0x9) 22:32:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x0, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r7, &(0x7f0000000000)={0x10000, 0x11}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}, 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 2756.850304] loop5: detected capacity change from 0 to 39 [ 2756.853724] loop6: detected capacity change from 0 to 39 [ 2756.944921] syz-executor.5: attempt to access beyond end of device [ 2756.944921] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2756.945929] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2756.949847] syz-executor.6: attempt to access beyond end of device [ 2756.949847] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2756.950913] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x0, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 2757.038372] loop6: detected capacity change from 0 to 39 [ 2757.070720] syz-executor.6: attempt to access beyond end of device [ 2757.070720] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2757.071762] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x0, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:00 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e6}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2757.138700] loop6: detected capacity change from 0 to 39 22:32:00 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x30, r0, 0x10000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x20, 0xc6, 0x9d, 0x3f, 0x0, 0x3, 0x80844, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0x9, 0x8000, 0x4, 0x80000000, 0x6, 0x2, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2757.205336] syz-executor.6: attempt to access beyond end of device [ 2757.205336] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2757.206405] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2757.241394] loop5: detected capacity change from 0 to 39 22:32:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000040)="125bb667639de59932d1bca7bd3ca70c13eb3a5bc6500e11c30bcac571dcb8a4e17d95e87333f632d65063ecf203e12e6ab691a5c92620da7f12196fa6cb5e65a6fc305231d8c0e55f4b6b8767e6e9853ad202fbfc14eaf5580acf8a26bfcc6e1eebf40c549982781e8daa2b9455d0bd59ee701c336726aedc06f405194362c2b64f513943425cdc3994c4fef9192c2dacd4019c0f4c0fc09b2fce32c3894c3cb6d7ca550571f95d0b41a728d895", 0xae, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2757.400490] syz-executor.5: attempt to access beyond end of device [ 2757.400490] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2757.402377] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x0, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x0, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:12 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cpuset\x00') r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x2004020, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="d1b3518c907bfbb24561e64084dc47f4935cad6e9365aaac3a49b2045145beaa9e1e2d760bcb2e138bedcf2bb1095a89369d68563343fd6157e519e1a1e0956896238a208d86cd801553cdae6df35499e19cb31623932d1655d0675b75d2c0256cf74e862b47962b6c514b14d468cecf2f55c299da9b399e2158bd12f72321182a9a9662f85e05dec8dcb8089f4df47656ac6f32bb9f0ed95e4cbd99d27875f85febd3083eeea0dac366", @ANYBLOB="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", @ANYRESOCT, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYBLOB="055cae8c9a015252efe1eb7f4dbbb7026e104a8a7b298ab5f9c077ed3ab867224c5c872562075bbf8f43bdb0ae517e6de2e7f56d7e1e7a50a11a66aecbca4e8aa1"]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) open$dir(&(0x7f0000000180)='./file1\x00', 0x450000, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file1', [{0x20, '{++B'}, {}, {0x20, 'vfat\x00'}, {0x20, '\xa4+'}, {0x20, 'vfat\x00'}], 0xa, "4d2f4e269a5291feae092594ed6dbaae9c56d45e8d36829754bfae4fd0a33e137c74b59d7d65f41bbb6e7f7b9f4829d8c97fdf28623a05a4c7b3c157413f2555b0fdf575f7c61125555fe1e2b0fac217b1941494a9bd9df51b7288dcec5fc384400ebbb92084b2b320f8f9362c2410d64fc62fb2cdfe15cb181b9fd95e169ed09a28bd94dc24cd6b1be51b4cfa878e4824258c365b4af37bf2cf2f12b1effe7e8276ebfc51450cbeb2be0c5d6fe0f718a34af312"}, 0xd4) 22:32:12 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e7}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:12 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x8, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = socket$inet6(0xa, 0x4, 0x3) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r7 = socket$inet6(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) fcntl$dupfd(r4, 0x0, r5) [ 2769.294837] loop5: detected capacity change from 0 to 39 r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:32:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:12 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_io_uring_complete(r1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) [ 2769.319629] loop6: detected capacity change from 0 to 39 [ 2769.393037] syz-executor.6: attempt to access beyond end of device [ 2769.393037] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2769.395482] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2769.425060] syz-executor.5: attempt to access beyond end of device [ 2769.425060] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2769.427103] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x0, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:13 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e8}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:13 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 2769.807517] loop6: detected capacity change from 0 to 39 22:32:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2769.890589] loop5: detected capacity change from 0 to 39 22:32:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2769.988887] syz-executor.6: attempt to access beyond end of device [ 2769.988887] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2769.990890] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2770.019249] syz-executor.5: attempt to access beyond end of device [ 2770.019249] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2770.020920] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:13 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = epoll_create(0x1) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x20000017}) syz_io_uring_submit(r1, r2, &(0x7f00000008c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xff, 0x1, &(0x7f00000007c0)="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", 0x8, 0x0, 0x0, {0x2}}, 0x9) syz_io_uring_setup(0x6528, &(0x7f0000000000)={0x0, 0x5cfb, 0x4, 0x3, 0x3a0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="4365f333e62c2d8f118203ef0b65abd5b8761270d942eba4504d9ebefc1334add6fb45d6ce6e07466c10e62e5d6e47dced8106786e7c1392fcc19bde49c1cd26aee65a97534fba0e28144efee7af0c03fe59550fabd9ee1984c63510a0f62b4ac9482341f4d0", 0x66}, {&(0x7f0000000380)="57ff6974fb", 0x5, 0x1000}, {&(0x7f00000003c0)="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", 0xfc, 0x3e}], 0x8408, &(0x7f0000000540)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@dmode={'dmode', 0x3d, 0x986}}, {@hide}, {@mode={'mode', 0x3d, 0xf9f5}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', 0xee01}}]}) syz_io_uring_submit(r1, r5, &(0x7f0000000740)=@IORING_OP_STATX={0x15, 0x4, 0x0, r6, &(0x7f0000000600), &(0x7f0000000700)='./file1\x00', 0x100, 0x400}, 0x7) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r8, 0x0, r9) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r10, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r8, &(0x7f0000000780)={0x80000000}) dup3(r0, r3, 0x0) [ 2770.296708] loop4: detected capacity change from 0 to 16 [ 2770.354422] loop4: detected capacity change from 0 to 16 22:32:25 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103e9}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:25 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r7, 0x0, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) syz_io_uring_submit(r7, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x101) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:32:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2782.239714] loop5: detected capacity change from 0 to 39 22:32:25 executing program 0: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r0, r1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) connect$inet6(r5, &(0x7f0000001440)={0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) r6 = socket$inet6(0xa, 0x1, 0x0) process_vm_readv(0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000200)={r1, r1, 0xfffffe02}) r7 = dup3(r5, r6, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_io_uring_setup(0x43ba, &(0x7f0000000000)={0x0, 0x6e47, 0x4, 0x2, 0x1bc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 22:32:25 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="08e78e6e330d"}, 0x10) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:32:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r5, r4) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@msize={'msize', 0x3d, 0x3}}], [{@dont_appraise}, {@dont_appraise}]}}) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x0, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2782.281046] loop6: detected capacity change from 0 to 39 [ 2782.390664] syz-executor.6: attempt to access beyond end of device [ 2782.390664] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2782.392452] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:25 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2782.461042] syz-executor.5: attempt to access beyond end of device [ 2782.461042] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2782.462389] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:25 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103ea}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:25 executing program 4: r0 = syz_io_uring_setup(0x400046ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1c7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r2}, {@void, @actul_num={@void, 0x8, 0x45}}}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_bt_hci(r8, 0x400448cb, &(0x7f0000000180)="9f2ea95a3dd18be6b34e26f3f80c9df6b0ebbd4abf89cebd95c57d7846c664be83c70e5c729a4ee4a39853195dd01a171526ae473919add82055fcabcee561edc73c65a6c4d1ea85836a896c8cbed0bfecabe84edcd5dcb8200b6c89fe5102710551f0d7101bc8d0e52a37733ac6ea52a6b9a8f57adc0d7d8060b07f6bce327729964ef0af6ba188857364195a7036a7f9929ff0da8553400d6240f736c42b32034504bafc2d85c06d13941c8d51ecb1") syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:32:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2782.612253] loop5: detected capacity change from 0 to 39 [ 2782.615514] loop6: detected capacity change from 0 to 39 22:32:26 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x40002017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 2782.702244] syz-executor.5: attempt to access beyond end of device [ 2782.702244] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2782.703530] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2782.894527] syz-executor.6: attempt to access beyond end of device [ 2782.894527] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2782.896432] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2782.905140] loop5: detected capacity change from 0 to 39 22:32:26 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:26 executing program 3: r0 = syz_io_uring_setup(0x800046aa, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x7b21, &(0x7f00000001c0)={0x0, 0xf8fc, 0x1, 0x0, 0x11}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) syz_io_uring_setup(0x3a3d, &(0x7f0000000140)={0x0, 0x9d02, 0x2, 0x2, 0x53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000280)="ecec116f0e8dafbea744cc617b62c65f6f3a78f1ef38b58e5093648d04a162fea906a3cb5842679ea9f8aee97bf4991173f64816bbdf599871ad24bc2a3901cc8d8b5290546849895d3525bd98", 0x4d, 0x0, 0x1}, 0x0) r5 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x81, @broadcast}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x1003, @fd_index=0xa, 0x7fffffff, 0x892e, 0xdfe, 0x1a, 0x1, {0x1, r9}}, 0x9e) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r10, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:32:26 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103eb}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:26 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) dup3(r0, r1, 0x0) [ 2783.169389] syz-executor.5: attempt to access beyond end of device [ 2783.169389] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2783.171398] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2783.385151] loop6: detected capacity change from 0 to 39 22:32:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2783.517074] loop5: detected capacity change from 0 to 39 [ 2783.549011] syz-executor.6: attempt to access beyond end of device [ 2783.549011] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2783.551106] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:27 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103ec}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:27 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x709003, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800012c}, 0xc, &(0x7f0000000200)={&(0x7f00000014c0)={0x1224, 0x19, 0x20, 0x70bd26, 0x25dfdbfc, {0xf}, [@typed={0x4, 0x49}, @nested={0x1188, 0x5c, 0x0, 0x1, [@typed={0xcb, 0x64, 0x0, 0x0, @binary="171b33aa31226e8bed7d05eefb84c1bb0c222e139bde26ea513914fdd164a251585fee62ccc120793ab86b529cc2491d5e284174e1f8b9d83b0ded8d8825ec56a3e2dae39ee40e9d3e418677e0f9d08fb5732da380978ed01f47f1e3ac5cdf5eb4f37bbb5f001700de5be4df71a9ba9a347683ee511cd7e9e3e4496db780ba1a12828b8bb436dcd0eaf57cc319a966576453c0a9198e012e2321d745cedf8350590477f4297104bb3f752dcae6ba2becc25f6efc32f95c22f9ba35f3651d39f3789e7d480b7615"}, @generic="bcbee5aa0f9dd9d31058760a142b0a03360df2b1ce109e8d7279ff7dab0423c0a140515439ed05ee12b4b7d8327e01dec9b5673c6a63fc9db65aafac92e0b0b6edab08c058a0ff6d16a8f5", @generic="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", @generic="d79b0941fdda28df7c095f88e9ec09055316bd12e265695b5f043cfcee2d363a985b11b2703b60d6e5a04422bbd22c6d8e176b424c5edf766907efaced275abf51cfcf51fa1dc5d8c903ab247215be1d4b1bea3cea5029cd9ce7d1e329e6c86e52bf132234", @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@loopback}]}, @generic="77db6e297ed0cd16e7828d5ecba72ec11020e737c38b7e4ae579d68d834af9d8ec9930d67563c339106a49", @generic="7338609fe2352f38f3272070112364499f5c03479ba3c8dab38b19fdbfeffd7ac8783af4ff0b270e6bf5dfd5ce5ec2aa57be195aea03b4ed7d4c8520ad938682e00af59d1a9c981a4a876aca3209bf068a3fea18927c"]}, 0x1224}, 0x1, 0x0, 0x0, 0x800}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14, 0x13, r6, 0x8000000) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r9, r8, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r10, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @private=0xa010102}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)="e08e1115d1e866a076940d8ccb6b2b1198f94e3b1be7b73eaf214c47b1f1686d716b5d24bdf7c391724076e02ccda3603be8c4b34e3703e05249b56b6482bcf8e2e97244bd6ecd547eb4c95e3d31de204942c56251edb66bbfb7d5a30ff280a30da2b133e9e6c1cb5b8d9a0f24a2684fdaf971a0e3931c001bc19b04ec11e52cac", 0x81}, {&(0x7f0000000440)}, {&(0x7f0000000480)="f314e9cf22f9f84cab90331f10c6e25af2b909215fce0181ee7cfd4046493ea220a3534d23823574ccdb674de9001aa10f66f906a9970a286abda1b1fc209f8e47b436b4db9e6bf7296b83d696c8afa8d493c2efb9c7da3f58ff1a775e65f34ab5977afaabfe2c298429e611168a", 0x6e}, {&(0x7f0000000500)="f4f55814b67482856291a07472636cefe9e0e1cd949350f76446f86c74d525638ea4ca4824267cdd81d4592421bc2bdaf9824ebad5c95dabbad04ad38ec4e7707e9a9b3532fb9cf45b59ae9d7d52e227526807d3b6806df9e333123fe0a540b07d647d38b1fd450054f1691f53ccfcf1f29aa3ee2fa21b", 0x77}, {&(0x7f0000000580)="cd290f580f409c29a48191b20033f708bb82c1cacbe08b9a0b817ec39e6977a64bc160446ce456d722df8d430b1901046c80b0a818892bad3141d0e025e5381c59438de4e16afb57df672142247147a3df87ddff26c91dd2eee67f6569ea151460cb570ba2423431823afb4bfe7dac4b8dcc33e24b41eede495a84fae3ff5f895a6276f76f602ff344dc0cdda8179276449f96e51f331d8b17eaef3c73d1bc440a1904bf7f8da64d53cdae793e1a436e76f2c4ffd168232fc83aa2b5492cc5fcb4a101d2b70b98f31b3043d3d85c32a0cfc11783d50f2a2e7874ae7660546cf04f09a9e351d5", 0xe6}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000000680)="d82537b15a420b1456cae6a9786ed4a2dc2421477760ce79e4dcd152b398b174066efd7e1eb39aa5b18a49245f06d03a2c278b55df8792ae43afcece5e2bd121f2905bdf32b044a4b8a5576df2f9db1654ed43e8f7ca000fae3a625c51cf7c9ec469c3b80f859473e28a2eac5330d717d319f9d28888f7ae4fb4a7ef0ce6a6256ab87edf21d8c09fbf93a3198891ba78b232b95ccc107afdd7fd01cb8399b4493c082e32dce370761b4a03be8d12905f6d70b0dafb3758275e4de42a972d9fbbe93ed77926252e2d9bd7ad2abe2a3f55f404afb7924cebeb846c4905c581fdcfe0e44a09", 0xe4}], 0x7, &(0x7f0000000800)=[{0x40, 0xff, 0xeb, "c50fa0b093213a774c7187def21f8a18bbd698cb9418c6dc5d1c7b00ca8240c353dfbdcabf97b2d318ea123724bfb1"}, {0x28, 0x111, 0x8, "8161f0589543a00e66b24a618e1aef9e60e14f1d25"}, {0x80, 0x1, 0x40, "3fe7c5546b3f500b590c3ffc9bea06e997a63dada4c2757e4b2c9331a9961e83ffc76e1c609be98863d247acf38eafa32e7aa1f59294aa6e5d031aba6fadd905a4edb08973ed78df002dc1fae6d90f4a80d21cc67d4029262425d54f558f06e7f77a0c03c224b071a537"}, {0x50, 0x112, 0x5, "d92a047dc0d81ed097cfdd83dd4b530c0253d3263dfe845ba075de151d12e47c8822e604b4996d92e442f8a28cfeafb70e6974ae3214e7a55fe396"}, {0x18, 0x29, 0x8397, "3e8b"}, {0x70, 0x107, 0x7, "9433f972e55e3085f0520edaa53e04b1ab0c7028224e9d1d5f1384c6ea583cb902a8ae430577c37ee8ccb534c8abf0f6685830c4075fe134858082e794e6405eced4477a1e6de55524c0ea8c1c9a93176d6209e2456275be3a8261cfeb3ad64c"}], 0x1c0}, 0x0, 0xa0, 0x1}, 0x1454d966) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x40, 0x20, 0x6b, 0x2, 0x0, 0x1d, 0x0, 0x70376a549cc20311, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f6d, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0xb01, 0x100000000, 0x6, 0x0, 0x400, 0x1, 0x40, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r4, 0x2) dup3(r0, r1, 0x0) 22:32:27 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2783.771196] syz-executor.5: attempt to access beyond end of device [ 2783.771196] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2783.773184] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2783.873495] loop6: detected capacity change from 0 to 39 [ 2783.959227] loop5: detected capacity change from 0 to 39 [ 2783.984163] syz-executor.6: attempt to access beyond end of device [ 2783.984163] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2783.986497] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2784.135689] syz-executor.5: attempt to access beyond end of device [ 2784.135689] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2784.137543] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)={'L-', 0x17e5}, 0x16, 0x3) 22:32:39 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0xc1b7, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x440fd3a0, &(0x7f0000000000)=[r5], 0x1, 0x0, 0x0, {0x0, r6}}, 0x401) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) dup3(r8, r1, 0x0) 22:32:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:39 executing program 2: socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:39 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103ed}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:39 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x6bae, 0x0) dup3(r0, r1, 0x0) [ 2796.228626] loop5: detected capacity change from 0 to 39 22:32:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2796.268859] loop6: detected capacity change from 0 to 39 22:32:39 executing program 2: socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) [ 2796.315453] syz-executor.5: attempt to access beyond end of device [ 2796.315453] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2796.316486] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:39 executing program 2: socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) 22:32:39 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd_index=0x1, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30a61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) syz_io_uring_setup(0x7d85, &(0x7f0000000340)={0x0, 0x93ca, 0x10, 0x3, 0x32f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x1ccd, &(0x7f00000001c0)={0x0, 0x9526, 0x20, 0x2, 0x36}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000300)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000000000000700000000000000010000003a59c6bdb320a8850000000001f9ff00010000000500000000000000c0863e0000000000000000000000000000000000000000008002000000000000000000000087e8fe"]) syz_io_uring_submit(r7, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001440)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x2) dup3(r0, r1, 0x0) [ 2796.401484] syz-executor.6: attempt to access beyond end of device [ 2796.401484] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2796.402660] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 22:32:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2796.494588] loop6: detected capacity change from 0 to 39 22:32:39 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:32:40 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 2796.573468] loop5: detected capacity change from 0 to 39 [ 2796.638095] syz-executor.6: attempt to access beyond end of device [ 2796.638095] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2796.639356] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2796.641716] syz-executor.5: attempt to access beyond end of device [ 2796.641716] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2796.642814] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2797.121619] syz-executor.1 (13207) used greatest stack depth: 22264 bytes left 22:32:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x161040, 0x8) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) r4 = getpgid(0xffffffffffffffff) r5 = getpid() r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x4e00, 0x0, @private1}}}, 0x108) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) clone3(&(0x7f0000000400)={0x400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180), {0x3e}, &(0x7f0000000300)=""/211, 0xd3, &(0x7f00000001c0)=""/18, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, r5], 0x7, {r8}}, 0x58) 22:32:53 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103ee}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 2809.784698] loop5: detected capacity change from 0 to 39 22:32:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r5, 0x0, r6) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r8}}, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1000, 0x0, 0x9, 0x1, 0x0, {0x0, r8}}, 0x1) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r9, r10, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r2, 0x0) [ 2809.845341] syz-executor.5: attempt to access beyond end of device [ 2809.845341] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2809.846750] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2809.852549] loop6: detected capacity change from 0 to 39 22:32:53 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103ef}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) [ 2810.080092] loop5: detected capacity change from 0 to 39 [ 2810.127515] syz-executor.6: attempt to access beyond end of device [ 2810.127515] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2810.129535] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:32:53 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000080000007f4f00", @ANYRES32=r1, @ANYBLOB="ff7fffff000000002e2f66696c653100"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x30, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = pidfd_getfd(r6, r5, 0x0) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f00000001c0)=0x5, 0x4) fcntl$dupfd(r5, 0x0, r6) ppoll(&(0x7f0000000000)=[{r2, 0xc0}], 0x1, &(0x7f0000000040), &(0x7f0000000180)={[0x6]}, 0x8) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:32:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2810.367715] loop6: detected capacity change from 0 to 39 [ 2810.386484] syz-executor.5: attempt to access beyond end of device [ 2810.386484] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2810.388469] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:53 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f0}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:32:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2810.622194] syz-executor.6: attempt to access beyond end of device [ 2810.622194] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2810.624273] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2810.674721] loop5: detected capacity change from 0 to 39 [ 2810.832315] syz-executor.5: attempt to access beyond end of device [ 2810.832315] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2810.834566] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:33:06 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x8000, 0xb65, 0x8, 0x1, 0x1}, r6, 0xc, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:33:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:06 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 2822.742543] loop5: detected capacity change from 0 to 39 sendmsg$nl_xfrm(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@report={0x1fc, 0x20, 0x4, 0x70bd2d, 0x25dfdbfd, {0x32, {@in6=@empty, @in=@remote, 0x4e20, 0x4f0, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x0, 0x0, 0xee00}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @extra_flags={0x8, 0x18, 0x20}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@local, @in=@empty, @in=@loopback, 0x33, 0x1, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast2, @in=@remote, @in6=@mcast1, @in=@broadcast, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0xa}, {@in=@broadcast, @in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, 0x2b, 0x1, 0x0, 0x3506, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, @in=@private=0xa010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x32, 0x4, 0x0, 0x0, 0xbc0fae245f5207b0, 0xa}, {@in=@rand_addr=0x64010100, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x6c, 0x4, 0x0, 0x3505, 0xa, 0xa}]}, @extra_flags={0x8, 0x18, 0x3}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:33:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:06 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f1}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4d2340, 0x100) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2822.752532] loop6: detected capacity change from 0 to 39 22:33:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {0x20, '.-/{.*%'}, {0x20, '\x00'}, {0x20, ',\xb1)'}, {0x20, '}*-&'}, {0x20, ':'}], 0xa, "6b3b6b40153605dbc53e2582e3fe7c95a21a838da91783da503854c39a4b3edf65189e2c358da8e223a2188822deae49430a6a46d672c3f973c10786b3"}, 0x68) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) finit_module(r4, &(0x7f0000000240)=',\xb1)', 0x0) dup(r3) 22:33:06 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000014c0)={{r1}, 0x0, 0xc, @unused=[0xfffffffffffffffc, 0x2544, 0x0, 0x81], @devid}) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0xdd707180) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000010000000b40000000000000"]}) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2822.860664] syz-executor.5: attempt to access beyond end of device [ 2822.860664] loop5: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2822.861717] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2822.869254] syz-executor.6: attempt to access beyond end of device [ 2822.869254] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2822.870357] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:33:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x3, 0x20, 0xfffffffd, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x20000017}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:33:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) openat(r2, &(0x7f0000000040)='./file2\x00', 0x40, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) [ 2837.159363] loop6: detected capacity change from 0 to 39 [ 2837.170841] loop5: detected capacity change from 0 to 39 22:33:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:20 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x441040, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x7, 0x7, 0x3, 0x0, 0x0, 0x80400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000000), 0x9}, 0xc0, 0x0, 0x6, 0x1, 0x7, 0x1000, 0x3, 0x0, 0x3ff, 0x0, 0x7fff}, 0x0, 0xa, r1, 0xa) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r5, 0x0, r6) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r2, 0x0) 22:33:20 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f2}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2837.345642] syz-executor.6: attempt to access beyond end of device [ 2837.345642] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2837.347542] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:33:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:33:20 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f3}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:20 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) openat(r4, &(0x7f00000094c0)='./file1\x00', 0x402000, 0x8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x1000, 0x5}, {&(0x7f0000001240)="0b027ae16f8018d88d59668e8cb3b795157da837cfa1f5c764b3861998901fb5689df02cbbcf7d42d8a2d97f4981a142755fae43f745aaa2b2748de536404ed1b1c5be5e598000c95df5b9514669af7debcf2b0248ad35a564a496d8952ff0691ac1fc623fbd039dfa428abe8ebc205bb57e9367c135b8d6a5c5445c4414ca26212a6d3bafb222cc91915da1013a8483d35546db09f69fdd353e0a9ea58aca9d9c7d4d56d273ddf309b1cff31c59817e69763e6987c53fd1f24906177ef87a2b55d944", 0xc3, 0x5}], 0x10d0, &(0x7f0000001340)={[{@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}], [{@permit_directio}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) fstat(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000090c0)=[{{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/210, 0xd2}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/43, 0x2b}, {&(0x7f00000037c0)=""/8, 0x8}, {&(0x7f0000003800)=""/110, 0x6e}, {&(0x7f0000003880)=""/92, 0x5c}, {&(0x7f0000003900)=""/38, 0x26}, {&(0x7f0000003940)=""/146, 0x92}, {&(0x7f0000003a00)=""/171, 0xab}], 0xa, &(0x7f0000003b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003c80)=""/48, 0x30}, {&(0x7f0000003cc0)=""/131, 0x83}, {&(0x7f0000003d80)=""/132, 0x84}, {&(0x7f0000003e40)=""/57, 0x39}, {&(0x7f0000003e80)=""/126, 0x7e}, {&(0x7f0000003f00)=""/228, 0xe4}, {&(0x7f0000004000)=""/59, 0x3b}, {&(0x7f0000004040)=""/115, 0x73}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/207, 0xcf}], 0xa}}, {{&(0x7f0000005280), 0x6e, &(0x7f0000005480)=[{&(0x7f0000005300)=""/14, 0xe}, {&(0x7f0000005340)=""/130, 0x82}, {&(0x7f0000005400)=""/27, 0x1b}, {&(0x7f0000005440)=""/25, 0x19}], 0x4}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000007980)=[{&(0x7f0000005540)=""/121, 0x79}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/176, 0xb0}, {&(0x7f0000006680)=""/67, 0x43}, {&(0x7f0000006700)=""/178, 0xb2}, {&(0x7f00000067c0)=""/226, 0xe2}, {&(0x7f00000068c0)=""/28, 0x1c}, {&(0x7f0000006900)=""/124, 0x7c}, {&(0x7f0000006980)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007a40), 0x6e, &(0x7f0000008b80)=[{&(0x7f0000007ac0)=""/99, 0x63}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/24, 0x18}], 0x3, &(0x7f0000008bc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008c00)=""/145, 0x91}], 0x1, &(0x7f0000008d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f0000008dc0)=""/243, 0xf3}, {&(0x7f0000008ec0)=""/140, 0x8c}], 0x2}}, {{&(0x7f0000008fc0)=@abs, 0x6e, &(0x7f0000009080)=[{&(0x7f0000009040)=""/34, 0x22}], 0x1}}], 0x8, 0x40, &(0x7f00000092c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009300)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000009400)=0xe8) sendmsg$unix(r1, &(0x7f0000009480)={&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)="4669e03ccb5d5aa5146711088292b79e83f6eed003ad20a27e152a0806cee2fc64f6ea8ea4dc77df416ad8b2401c7f8b8035cd522127d999dc7a87d4df2f562fa2eff2a36c63bae961b612a44cf902891787c222614d8cf45f35524312c0d35438cef53eedce77a84e5bc1040d17e68bee9146eace4b8409211a0bd08a6dcceeb1f38f9b7092c7204f1de4d3c69e4a2ab6b6d2d75804c0ee8056dc1fc6acec9167a56f83356d88ad4b20463a822da667029c4e6a38c8f78d59af29affb143ec151e89145565549e91bb8ab99dbd942c93050e6c1", 0xd4}], 0x1, &(0x7f0000009440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}], 0x40, 0x1}, 0x20004815) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) sendfile(r5, r1, 0x0, 0xfffffdef) 22:33:20 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x122, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @link_local}, 0x10) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000011c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file1\x00', 0x8, 0x20000, 0x12345}, 0x6) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) read(r10, &(0x7f0000000000)=""/66, 0x42) syz_io_uring_submit(r7, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd=r6, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2837.489773] loop5: detected capacity change from 0 to 39 22:33:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2837.629710] loop6: detected capacity change from 0 to 39 22:33:21 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_setup(0x7874, &(0x7f0000000000)={0x0, 0xd021, 0x1, 0x3, 0x349}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20c1, 0x0, 0x1, 0x7, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:33:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2837.816363] syz-executor.6: attempt to access beyond end of device [ 2837.816363] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2837.818210] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:33:21 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f4}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2837.933632] loop5: detected capacity change from 0 to 39 22:33:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2838.064458] loop6: detected capacity change from 0 to 39 22:33:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r1, 0x3, 0x0, 0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:33:21 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)={0x3, 'bridge_slave_1\x00', {0x10001}, 0x221d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = memfd_secret(0x80000) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req3={0x77, 0x80, 0x4, 0x2, 0x9, 0x1ff, 0x6}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) signalfd4(r6, &(0x7f0000000240)={[0x7f]}, 0x8, 0x800) openat(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x2, 0x8) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x5) syz_io_uring_submit(0x0, r4, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000300)={0x90000000}) dup3(r0, r2, 0x0) syz_io_uring_setup(0x43a3, &(0x7f0000000180)={0x0, 0x6301, 0x0, 0x1, 0x26a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000200)) [ 2838.242335] syz-executor.6: attempt to access beyond end of device [ 2838.242335] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2838.244119] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 2838.288400] loop5: detected capacity change from 0 to 39 22:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x0, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:37 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10041, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) fallocate(r0, 0x48, 0x3af1, 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:33:37 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f5}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:37 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = socket(0x16, 0x1, 0x7fff) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x2002}, 0x7a51e317bd2f9010}, 0x3ff) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r6, 0x0, r7) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r7, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r1, 0x3, 0x0, 0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:33:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x3, 0x20, 0xfffffffd, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x20000017}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:33:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x3, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x8}}, {{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) r1 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000440)={0xc8, 0xe574, 0x7ff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000240)={0x101, {0x0, 0x8, 0x1, 0x67, 0x40}}) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_setup(0x50e4, &(0x7f0000000180)={0x0, 0x4423, 0x4, 0x1, 0x387}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r7 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000}, r7, 0x0, 0xffffffffffffffff, 0xb) dup3(r1, r2, 0x0) [ 2853.759190] loop6: detected capacity change from 0 to 39 [ 2853.799608] loop5: detected capacity change from 0 to 39 22:33:37 executing program 3: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="01b50000010000001800000088b4a50be8d50b910ae5229babb8b8d9a7a7ee82bf8fb6a702580e18f37745d19c41fa4163488eecd8b1d6a209baff6a92e0601b37f5be66a34f7b0573793afd971f4d5001000000ec92796414b3763c052e5ebce3dd725c3581dafd0fa1f71fbe320ec080610060a17269fee055b2e47a00463fe066eb5df3759aaa1f867d27a65a32d607faf88301aff3cf9b7306b4c5ebb8", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c653000ca45000000009c24f9e3a3ec48191ba5cc1fe364086a6534a2552c57000055a9ed9560edc58a323db322187dcfce5c0b9bfaa427ef5eb2e4341d64764d51d1badb221fe3b8c1b2f69727fc2e1cb83a3d923ca032ebf44055e507ee9b07d98838f1dcb13bea1701eae4fb8deb7db4213decefe32d158e67ffdfa12a2ac7c38bbf130a9f708b3d9e5ed9c02b8469edcfc5afb7002799408aab"]) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x80, 0x2, 0xfd, 0x8b, 0x0, 0x9, 0x204, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff375c, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x1004c, 0x4, 0xffffffff, 0x1, 0x100000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2000000000a, 0xffffffffffffffff, 0xb) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd16, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xafa0da520709d0ce) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5378fb75219e231f, 0x28) [ 2853.996089] syz-executor.6: attempt to access beyond end of device [ 2853.996089] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2853.998090] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r1, 0x3, 0x0, 0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2854.195604] loop5: detected capacity change from 0 to 39 22:33:49 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10041, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) fallocate(r0, 0x48, 0x3af1, 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:33:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x402800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) 22:33:49 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x1, 0x1, 0x0, 0x57, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x2000, 0x200, 0x6, 0x7, 0x2, 0x2, 0x3, 0x0, 0x734, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x1) dup3(r0, r1, 0x0) 22:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x3, 0x20, 0xfffffffd, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x20000017}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:33:49 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f6}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:49 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x40, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:33:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0x0) 22:33:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2866.044555] loop5: detected capacity change from 0 to 39 [ 2866.070687] loop6: detected capacity change from 0 to 39 22:33:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0x0) [ 2866.137494] loop5: detected capacity change from 0 to 39 22:33:49 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40000012}) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) dup3(r0, r1, 0x0) 22:33:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r4, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0x0) 22:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x3, 0x20, 0xfffffffd, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x20000017}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:33:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:49 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd, 0x5, 0x0, 0x0, 0x1b, 0x0, {0x2}}, 0x2) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x6000, @fd_index=0x6, 0x4, 0x0, 0x0, 0x11, 0x0, {0x1}}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x4, 0x0, 0x0, 0x1c, 0x1, {0x1, r7}}, 0x6ed1daa0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x80, 0x7f, 0x3f, 0x1f, 0x0, 0x3, 0x30121, 0x1e, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x458, 0xb502a2cd01832367, @perf_config_ext={0xb84a, 0x1000}, 0x8688, 0x7f, 0x80, 0x0, 0x4, 0x51, 0xfffd, 0x0, 0x9, 0x0, 0xcc5f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2866.323881] loop5: detected capacity change from 0 to 39 22:33:49 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f7}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:33:49 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x8000, 0xb65, 0x8, 0x1, 0x1}, r6, 0xc, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 2866.532576] loop6: detected capacity change from 0 to 39 22:34:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:04 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x40801) openat(r3, &(0x7f0000000040)='./file0\x00', 0x547100, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) syz_io_uring_submit(0x0, r4, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) r6 = epoll_create(0x1) epoll_pwait(r6, &(0x7f00000001c0)=[{}], 0x1, 0x0, &(0x7f0000000200)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000180)={0x2001}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000300)={0xc0000000}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:04 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) tee(r0, r1, 0xffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) 22:34:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x4, 0x81, 0x0, 0x9, 0x8800, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x617c, 0x0, @perf_config_ext={0x8b, 0x1}, 0x40, 0x1ff, 0x101, 0x2, 0x2, 0x3ff, 0x3, 0x0, 0x20, 0x0, 0xc53}, 0x0, 0xa, 0xffffffffffffffff, 0xb) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000480)=[{&(0x7f00000002c0)="aa8b2bf57a9d1c7654855460ab9d9d92da28d6f7969017c388832ae859e9c0738e08e4758fd5f003ab2fde64389190e96b5ee0a5f54a188efc90bc1d92c079f3618796221971a1a66f5bec98e353c33b0ac5309794824b3709250f15e557fbaf0edbc2c0504a851494e75fa0c8b22f1debcf300932056550ee3c3b22efaf472eca49696912e67f52adea2545f8bffe507c99a5d24357e40d49decafe1cd2d679e17a5ebdaadf12ed87500a56d89bf00e00ec368931e5420783d8913484f9bba6ddc33e4ab5c70e", 0xc7, 0x64be}, {&(0x7f00000003c0)="603b8ba526d691f7840d553bb30400267a74239f6db585d82f98d1b66743f04b7f5eb0535c0ae686efe8d1f12e9dddf532fae3d359bca33b50c183cfb1b1373fa90584c09c8d6744e33b652bc8c31d129bd97a37dce98be1b88807c5b18ac77ef289b3c5e3b4f8497d0f4851c5407730184a1c6c30f44cfd149fd3d4de21ad76811d206d201eab32ad7c6f95f3e99fdef6704596509ae5765c375b7f9fd0ec7f", 0xa0, 0x5}], 0x800, &(0x7f00000004c0)={[{@barrier_val={'barrier', 0x3d, 0x10000}}, {@nojournal_checksum}], [{@fowner_lt={'fowner<', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) openat(r2, &(0x7f0000000580)='./file1\x00', 0x80, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000540)) sendfile(r1, r0, 0x0, 0x500) 22:34:04 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x8000, 0xb65, 0x8, 0x1, 0x1}, r6, 0xc, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:04 executing program 5: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:04 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f8}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:04 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x322e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2880.964600] loop6: detected capacity change from 0 to 39 22:34:04 executing program 0: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) socket$packet(0x11, 0x2, 0x300) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:04 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x8000, 0xb65, 0x8, 0x1, 0x1}, r6, 0xc, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:04 executing program 5: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:04 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000040)='./file1\x00', 0x400, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 22:34:04 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103f9}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:04 executing program 0: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x7974, &(0x7f0000000000)={0x0, 0x75db, 0x0, 0x2, 0x1fe}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r6 = dup3(r0, r1, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000870, r5, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000005, 0x10, r6, 0x10000000) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000540)=0x20) r10 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x1ff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)="531d39c6ed6f09a1191d346a77066c179474c2976be4511c3c6defafe3", 0x1d, 0x100}], 0xc, &(0x7f00000003c0)={[{@nodots}, {@fat=@debug}, {@nodots}, {}, {@nodots}, {@nodots}, {@dots}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@fowner_gt={'fowner>', 0xee01}}, {@permit_directio}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_async', 0xa042, 0x100) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r9, r10, r0, r11, r1, r0], 0x6, 0x0, 0x1, {0x0, r12}}, 0xfa) [ 2881.239134] loop6: detected capacity change from 0 to 39 22:34:04 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x6908, &(0x7f0000000000)={0x0, 0xfeac, 0x4, 0x3, 0x3b5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x28000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:16 executing program 0: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x322e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:16 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x8000, 0xb65, 0x8, 0x1, 0x1}, r6, 0xc, 0xffffffffffffffff, 0x0) 22:34:16 executing program 5: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:16 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@ethernet={0x1, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="392e5a39b458555e7f0a66a5a0c3a91e8337462fa7287dd58fb59a82228a3bfa736a68d7e3cd619c4b239298df540876037ba376efe7103c33c16480b28a0163fefbe43a2a896756a920d997adef18683033bb820ad84191bbc8405abd2cb667664f49c78766f93ead22f87c64d4083eb9f28de30bb729245b4e49bddc9c7ebe5317074cb0b902768f0438f8cfff9c1e16ffeb7a5003c5a79a1ab94b81339a6dd61571a0ced3b5a066d91f8eabeaf0c1041b754b269341bc7ce1c72362cae57dd7ffeca6e479cfc85f", 0xc9}, {&(0x7f0000000300)="14a46b974f877804990e94eae4f30c906dd3a611adf3271f5d4d69829f06e490b5c66c883d098cb59bde79f5b52fd7e0787363b8939119d9d7975f700fe03974e628da07b79efce8574f004252b202f3cc6b95e321bd012d421c0448ff390dd1816f0d434f7352e9466779103f66e7ecdfe897b866f3b796592198788045a721717fe802d25644d46ef75015b45763f549ad1f98369b89871266f67238140cc696", 0xa1}], 0x2, &(0x7f00000014c0)=[{0xb8, 0x0, 0xcf2, "f50f76ea63318920a17de42265872eb212408190fdc5dcea5ea42d88e29380c6a0a355b5e6b66110127dee1ce573b0ef66e50eb5a513261db1f5600d18de0edf9f5f4167b259aa63aa6b4b31c2c0015871bb7cd57d4f5499be5e454eb4d57f455df90f60804e76996a087c75693ce63fbfa47d996a3d0ff563b2cc308e5453582d6ce58072c69a91c23c5727454707e8cd517b9ab9b116539dfbece1f089b79f83f7bd3f3e19"}, {0x30, 0x108, 0x0, "ee5d63d7285c51c29cac40c49181ca71e0d0a5283fe476d79eef646b4f19af"}, {0x18, 0x108, 0x7f, "3806f2b40058d64c"}, {0xe0, 0x29, 0x2, "1f1afd03b9f3cba2cf7dca30af903c8628d3972e51d2f9b0eeb17bec53d68d094b40a2854917eceddfd5ff0f888d205626ebaf659d41e58ff8a91615e80c8332026c177390bbbde51971e31aebbe7fd7adb30bad929b751bf55deda518ee9ebb3bd68a4373677f20a4e78d6f6194708c100abf350e393a289457a14a7760bcddb90d78145c952e768039f0e96dcd231083f532c0f33eea7080afb0c437676c976774e203175da6848d3ce5b7557d13a3260e2b4a9836f972b89ebc3817cbb4412dac59b42862558ec692074b8b531b"}, {0x88, 0x113, 0x1c, "20ea16c26397665b26a73d2e6549712c737d685a217ef090226fb9056b4ff58a7257ce7948e62b29e681b053ffc12e15e7482d06a982220ec96e4fd7ec5fd1aa0c4db4d83bbf35a4199e5f154824409bc254cde6cc6f332c816ee0d053e0966b58302106a19bcd0d20e48644b8e53d7e85"}, {0x1010, 0x10a, 0x80000001, "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"}], 0x1278}, 0xc801) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:16 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103fa}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:16 executing program 3: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb0bd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9b0}}, './file0\x00'}) dup3(r0, r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="1e4550232b40c6c99595b04642c6c89eb17c1dd87723e4f8debcd392b58266d0856a47f1b454880644795f8969ddb94caa709ad7abafada2ae5bf27d0a81d90624483007429101b2794680fc870f2838a3238d715169b50cc2448712154b73205b2ce318f8d07273a2322ee24eba678f36a98125f09423740e9306e4b8", 0x7d}, {&(0x7f0000000300)="f766462c507783d102e1189f1677df71690ebe40ccbb5c4bc288681371f49829af72a0ef4b29f212d6e94fbc9733f45594fd6d001dc1221f893fff38e6ebac52812ffe2727c90cf7e94df27b1df6fe4662b61a54982ab9fa99884d42579501f72b37bc3a28c8148e26971a7121c308b82ded74246ed6f4cffe309ad7d3b4b34ec4", 0x81}, {&(0x7f00000003c0)="3441926b13fe00dbe1b69657b4102a951f7edfedadb1aa070bb5b6442710d154a8d4b4a8d6976b37a0fb174a975b021c014971725d38f7b526d00c4d851620726d38bcae7a6c05967bd8c0ca7442e520706767b28e3eceed43fe5e33610ceb45ec6b05923405b911242145c676e78924cbf5a331895e134e43eb8cb91a7a242b807ab8ed01a7b1b8c578d1822fd498bc6cc39d0b0b416d898431dc85bf76da829282122b901a342249e24067c733077694e37180f8c7ded983dbeb33f7dceb0a8ed90f8218e55b8a2badf1ba815adc4a2af555f4e6c1be18723b474aa70b24e63f949b1412525d53217458bc6324d9f67bc917ee14f9b2", 0xf7}], 0x3, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x40010) [ 2893.365641] loop6: detected capacity change from 0 to 39 22:34:16 executing program 0: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x500}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:16 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) ptrace$setopts(0x4200, r6, 0x10000, 0x4) 22:34:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:16 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) 22:34:17 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0xa30e}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x40004000}) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:17 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103fb}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2893.550171] loop6: detected capacity change from 0 to 39 22:34:17 executing program 3: r0 = syz_io_uring_setup(0x4a66, &(0x7f0000000080)={0x0, 0x891e, 0x20, 0x1, 0x3, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="06000000000000002e2f6c653000000a0a2e0e223fca2aca3a0239583d6b99a5682aaa02449f30a8bb46d4c72cf046d86b3e2e756802cd3339b3a4ec1c88e7c644cdfc1a9db9b68c0682a492cd7d45b81735794c9ffc77d4fd52844823a4f67aa8eacbaab0"]) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000}}}, 0x108) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0xfff, 0x0, 0x9, 0x0, 0x1}, 0x9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000300000000000000", @ANYRES32=r0, @ANYBLOB="81000000000000002e2f66696c653000"]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)={0x10000000}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) socket$packet(0x11, 0x3, 0x300) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x913, 0x0, &(0x7f00000001c0), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='jqfmt=vfsold,errors=continue,prjquota,uid=', @ANYRESDEC=0xee00, @ANYBLOB="50acb3afec832c00"]) dup3(r0, r1, 0x0) [ 2893.612061] loop3: detected capacity change from 0 to 4 [ 2893.628510] ext4: Unknown parameter 'uid' [ 2893.691622] loop3: detected capacity change from 0 to 4 [ 2893.699028] ext4: Unknown parameter 'uid' 22:34:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5e, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="98790af6036dc7a532c9902014eab929ea", 0x11, 0x7f}, {&(0x7f0000000180), 0x0, 0x9}, {&(0x7f0000000240)="d1cca5e03ccf4dc83a194ba8f424b3a3d99a0ec88abe64f504fd4566d241e7f7fe5c42bcb09c89add96cfbba3de375a4009358190d27ce1276d68c005c59d81d0f5fb6201bf22ed8d1f4125e91e51d8b5df7032547cd4724891e102eda74412688526c8792f347b285274de3231e8e44e7c241e1ef21f8166b28148059563bbf4e48d2d377164625da7fbd63b97f778cdb837eaf8e113e1ab076531e186ad088cbbc63d4735df47c6093a6facff5125806e875470cd49631896ffd94f93927cfd2da806bed74f461f563126b0d742da1b436a795cd5550184169ad1454002ea84df41fa3fb934f2cf3511d3178fa5170e12941b65420f54693", 0xf9, 0x7c}], 0x170800, &(0x7f00000003c0)={[{'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'+'}, {'\'\'\xfe+'}, {'vfat\x00'}, {'vfat\x00'}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}]}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1000000, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) linkat(r2, &(0x7f00000001c0)='./file1\x00', r5, &(0x7f0000000440)='./file1\x00', 0x400) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:29 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103fc}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:29 executing program 0: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r7, 0x0, r8) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r8, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r9, r10, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:29 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) 22:34:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:29 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:29 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xa19) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000380)={r4, r5+60000000}, &(0x7f00000003c0)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x2}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000440)={r7, r1, 0xff}) syz_io_uring_submit(0x0, r6, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x131040) sendfile(r8, r2, &(0x7f0000000040)=0xf4, 0x536) dup3(r0, r1, 0x0) syz_io_uring_setup(0x6412, &(0x7f0000000180)={0x0, 0x5a7f, 0x2, 0x3, 0x39e, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000300)) 22:34:29 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="24bb0d02ad48e8d3e4f693b66d172013dc6263acf3d6d56611212a9ad9a07846dcf9fd90e09ce86ab95f7f86c5d864d4069a219641afb9a3a41b9dad52a9e78a246c4332dca91c9cddff5704350db8a7bd866a902ec6b381e4a14224c990dd8c486a1aded7f5b3921247cf6d2d0a91f79b59c52b152c722854f06f5c880629e5684fdc714c2a9279e2dc1c85d455902a7fe785d9fb5d188c5ac66ff9a88c16149a99f75ac44cca9b50dea57c75d5e41a144b61b048e608fbed5a6599ade0595293e5305136156680b96bccdb6bc77af84f0ea1520a2d79d5b2b75f9860ae71cacce595c720964c42c8a05a663cce8199d06f63b88dd76e359da379bb39b4aacedcdc3f82994ca06d25993babb746c78b5fa7c57cf5de30d538adf3eef062611ba9fdc140a7bb01006bca9710c549063dd3e774b529e527ecbe2876574d9f4856b91b414ffa92acb2630a5e42226844f63368a648eea16d34b61286abe62ea80c42d552d2d1d825a62625657216583b0b618757a2287242153cf03fadf4110da5069bca1ce6deb8c01523710bd3e7a642e52bb9d5214bf2e8b9f1642777e5d83fd3178c7b9471f396e8a3a4b983cf451102895ba99aa62858b9d61bf1c1fe266dcf05e9f2379a6ee0b779fb7dc91cb2fbf8ac939122d452e9965641afbb40248b14cd3bde0fe10042645fb06a7f8bd7458db43f0d449bc1b5f39ad7369238d4716c243a61f2150678aa7ff5d107c537013a932bc6fb2dcb1b5e5a0a9cb4e60b69fc963159ff62e792dab3eb5ccd460e09dd26bca4654543676a8ba09d7d02b422e8866755744b91f86ef800f93de66c1577d3846d861769f0b0f36f7a08a03b69b2416a5390d775512b49c8f4c30641856fa68146a9a73f36c751c03f128f9f17055e17373f10ddfc75bc77058559e6134027310ccba0825ddcb2d1c3b4ba72caaf295e957f3ee7d0e711f59a342f8c95c63ea7ba4247f3d8382ac86e49615b8d7b1d67329e4e383a9f884349fc52f6c2c69530ff1eaac2c3d127d68483f3021b4bd41ddfbcb44d35c5b3dc15054c6ba47399a7373c286e5a08d35858f7959f71de840f045a0e37129498174d0c7753e9bdced48248fa11f4d21019a2b26018cae66ae462dc61ad84862b3675642edf5a779ee83b867837994a394c4b0a3e10dbee73eddd3ab2870b08c4f1dc6bfe9b84914c3ef42de2802e9ce8b43aade7b448f1b6561eb926858f8aeb9e27c0d02c9b1078be6032c0acadff1e37b9562522eb8231e62801aaa7ab015f61868818cd73fe7913401d66fd9c24ec13c4a4ceaf9f2f82772b9e7852e5673af4f32cf9b1a53355714d37ed739de26ebddcc8dc3cce6a1810799367ed19fe9d9ddec7846cbd15d3c090a5e164752bdf36385b09f8fc5d90b117ded76ad7e74332aa6b2936e74604aa3f2aaf9d07272ada53fadd8c3fbbff153ba92fbf57fdad8ddb273ca7a2fa3a2daaaa8266f1e8b08ad84c33e423eea7c00c1db6dbc86ece8de3bf645c107779fb07362e4a44dbc7daf2b689b9f328b37df81d86bb9bf8faa4cbd6e1839e902e813278fb677ba6dffb8415407008a9ccae3109335a2aae91b9bc00e4e9efdb1d7d514c8542e4e99488520dcc39293141d1bdc219538661ea7b05ff652e00113fd54c6d45121136a1fcde883c3ab6f966cf878cae5f6c9525e551aa11e32673b4effe43076803d9d7b5fd93676263e69da90224ac3f9ee6aa6380e30a61ac75ec5fba20d29db46abfdcaf6e669c711b2c0bffa183ddd931a2e5bc91411d39248e9c7db86035478ab806e764ddf4e511a599297e117f85181cc40e838773527d63b957829c08f881c61cd73d83ca22bf626dccf8e3bc06792cf9862b42f5aab81fa6dfb6df7aadf0445210d6c17fa7e49559b8bc846410f7b7dcdf3e212d2c8dcfebb9208ce0c36e50539c61765362239f32db40b00dfb14be2d07fc682a2ed67e4ff62c1a272d3ac8346c1d18afd059c07f59b3f909c80f1f0aec81ec26b1c7197d5736fab39dc0ad35854410401c73ff1c0ffef5511bd6287d67dd24c1cc02385afc6a0cddfc54495f93385f5ad4ddc9d2a825c896f2ee77fe76cdc00373dba4fedbc3d15a3ebc1e63baa606f6e4dd5b146165c87d9f13cc4565c83cda9beb2e6d28669f1f02c54566898a41e14dbb9bba3bf50a469c817eab32e11683273a82f3d117f1af61f3d6f98debc055de6b8edd4dbe70b607951ea5e35ba941dff680f313ae5d58e7e6b0645590233e523b6a3684b621b761f022eebe3a0da9c6ac8ed58367598b8b3ad20bd7bdcb60e92ca20a94e9e0e3de71fb2c7bd908184d9d5149dd5ea7a1f5ab9e96793ae08c18d5978b6cac08e395fbc7abf3d07a28274a55c7b588fe3ee590ea11c0753be04f6444129bddf196ab9865790b67c8aed14bf531950b6670f8fbd1ac92a84e2d6b99b06a642fc4378c8d0e065f78224e36f15b1b1e2d67ad808776ca0c4207e935b5ad62c1f51758bc283823631fd4060723b3a782a677d9b44010aacea103f2d401bab6fad7c50bb427ab96119b6d685401ab99fd435e0d1f74377c3f9a447a69c5e385187d568f960c5657dd974d6ccacacb48fe1f5c2520c672ce134af81b5c0c017f95968b36898acb6cf596ae5d62e1d8e7efe5eb694119f60a539b2ff2ba6c46b85395e6dea4a8ffe18f5e301ede4ce5f98d31f2d864a48dd269ffa32bd8b00a1e42c01bae1b22a525c1bb2f8b45377b76424c27b5d4da4dd882b450210cbca30d843aec0e359c6dca50e2a2686d1e4ffe3327beb404fceb01da82ba2ad1707dd07245186185b628d9a8fbd27c04e9e8a6967e57f27254c27a247827f2a7f671b5ce183730bda091624cf969b8b14f320498bba8b418695ebd677360f17a073fc2a678f892b0dcbe7788f363d0f40c5bb72007b5c25ffe873ecf70f542451ed353bec6da50fc9772ad49ff9eb7560ec4bf48e9d8944cb47010fde38d314a26df2cadc69dfb39ed0cd8974f2493068b7a2ae634b58efccff055f63777fb18fe9b14dcf92c88ebc0c529eb691e572d3c5f17cf454448d27aa18ccc4fb40e896c2a33b7fee7f96e8349702e1340832159a31dcc9f180295cc86fbb6e5fa82c6af6e002d640389a6f6c80c138f5d16cd9b912774ddc5774908a744881c438c940f29e4e7130a9c25002866dae29b08c723ba5a2f19e70e0d234da2138988eb519b7555539e62eded3a00b54b9ea04f3cfcbe273dcc561cc0a8b252d887d9b81cf661cde28952544c7ee26a242f21313c6f38d5ce0ce9f18d82895120d620ce69a477bfe6e53e414f6e04e7b6f1bf2b34a039f28126745bd872627fef51e9d36c037085b55f4194bd85d8d330d1e99555fdce62d325a0523c4997da799a41f894c1417401ac3f69b6a76501f0649fccfcc39899573a074cfc223c04c42fe4881c11c2779525d5db5529d17e2319bc7fd854b42852132308c0e1525dba272f9c8f23d838b358d6a28d60387c9264425d639f965de618cd44a29d001ca8428118821354e5bc5bbc6a1f48e936a2b83a21d97a08b715d9ec6f41b2d392657e0e73b8d241fd1a4ac80330b3490e5e4314cd23cd11b7a17a5436c73b12826a9bc0ad0bdf0a42612adb8cb92e7203357bef47d76cf494f4a13e5750387fbdecdf5af3a2b940aa1be76e6ea7b65b324df35224b8514a0d3e3ed7b09611e8295fdee46721a556080bb95631fb6ad5ae7858099a229f0809415d145afe1b42404690c2639d95c074dacbb8502efac020cedc6b3605f078627bb76e9f683ee63572e5a6e4ead0175760328b03e46fcf860462e73a96e1d00a606dba228fc63ace61b14b06a5b88162eff00e5cf5ccb9e9addfba3627094ebe6d69e6d3717db62fb30a605b5bffb3735713a1b80568c6ec86c699ae54e22b232b01a48fe4c1d4b68657c6c48e03adc0b5fcd35af38b2302a6a50130cc5cef0d9d334d5dcfb7aefff458c5db7d91ce3f1ca403fa2d90472511c8b28d489d067e2026a224956072fa1f790784560150dba8ff3e6457799e5aa087e722165c146fc402f57c91f4586fbbd6dea4c02da79eaca12bc5ea97c733c7002d2064e0cc94d562d617d9adbdae3651112690836deb9393b161d8e085676f68c2fed2d56a8e81c3bd46d3b84ce1f6eeaad4da7caf5f48b9f8bd0d6d259d273111da8523c3997dd48d647646eebed7ed35533d07668569a20177a768996aa04b47a104741a54878f434ba58da73384efd84ef7697e506badd39d7bd77fa69352d65c1ff3990bae5f5f9eda416d8a1c6a4fb6bf1759c04901dcfab8b640f8cf42d69f18432c00d3d804933c45e8de29d6429054a595a36573d5dabe0833406337b5297b14efb558e9e9a6972eadef6893e035a19c83c3dadc90c26c7e9715b3599ae0fe5fb865b5946e7f172b0c03d9aefba0f458592fb98d06262fda03b7b3cfa30171d1e5481900d8f300fd1931cf87ad39006e222dbeb0ef8f454cb1f2292699e8928417618cd1ea0299579d7246ca5c64b813808575ef3164fc2eea9ad449136326258aee9d206a8fcff696857b0b99327fdb2cce53d30589ce4cf56617e08857f34511a8e37dfcff93eaa8e0fb62afe436c4e8f4203fe0724566ad750fef25dd3f70ccf907d94d3bdb610cf18c3937c02d374af93d3a62430eaac872ec03a4e6979021ba2d03236cc0f285a2aa1b497b579aa51bf1e235f960f52e95bde30c6a9aa264020c4c4746577437e74ac49211282e8747c8f9a2ee0f5e1a33b601423517ccc0afc47e6b758341341d6c7a1d29e4ac206d6288ee610a3a2db2a9dadec8fde466f76206ead6dededaf71079ab2193401101ed1dfb058348232bf98115f6d707ed435460d584f0b747d06b31aaefe9e360c061ca36427b37b23df92eed73c0cc8244886b6bc359559ea570b2edd390cdc4368fc9e55526972a5e85a92cfd134c6f013129eadf378bfa2bb8280618da6030a43c95ded4e019511848bd6182baa0536ab8dd85b32a9247a463bac4005aeed014b300975ba801ff34239d13bce4f0d0c7cecb9ed98afc699f5f2257e2eefe168a5c2f7bcbd4595c25edf1bc4def72ef2dab342dda870728b384953204d318f2cfb0dfe9c21ed61bca3a2121b204c13a36a627987c307de9379d06b8014c708c0ab0a178242bc33904604219366c10acf446671c2aa6f3195788eb6b336e9387cc6b37e0a9df121f3d2ec6a2263582f569ead6c4923430388bbedab6b7935acbc71fe423420388cdfa2a0612a94fa2491654cf4a4d6e873b8becf5cfe1cb1afb3bd18f929b9e5c0d517514b45fa57516dd3767bce65240c9f9e533e22d6b36792eb120b9302be87e24515111999df2c2bd752797772c7e8b98e3a4211a953a26c859ea4282e2142c1ced771dea26e4dd6e341e8f67513f867b40bcd0939810bf249bd4546d257f638080e8794a28ffa7f908592e0eb57d3958889cd6f212d8660f6c8ca67340347c38a2aa737174a012f9a8fd1ac5242bc8a80371e14ee94fbb7770086ba626f8efd63a42ec4f926d2bba0dd30e3816b066e31faabe71d1122c9dd67b607c20d588d73b955506d5d2959318b27e381e16f96a02c1d7cb55bdc9bd638cc5d3f14f64ee8d000fcd84540990468b5aa68337a63974482ff6556f0fab9f433154889c3ae466cbbdcdc631115d42bc65707978541dca213547a0b67603fa326d402e766bc37afb2ab9355879ce8f87a5aae872b9ea55fb41fa7cfeb22387ac6a13afdfbc85c7d018e2e7177fae34c5ae9bd881ba9dcfda4aaeb8", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f0000002200)={0x16, 0x8001, 0x3f}) 22:34:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x101) [ 2906.451053] loop6: detected capacity change from 0 to 39 22:34:29 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="24bb0d02ad48e8d3e4f693b66d172013dc6263acf3d6d56611212a9ad9a07846dcf9fd90e09ce86ab95f7f86c5d864d4069a219641afb9a3a41b9dad52a9e78a246c4332dca91c9cddff5704350db8a7bd866a902ec6b381e4a14224c990dd8c486a1aded7f5b3921247cf6d2d0a91f79b59c52b152c722854f06f5c880629e5684fdc714c2a9279e2dc1c85d455902a7fe785d9fb5d188c5ac66ff9a88c16149a99f75ac44cca9b50dea57c75d5e41a144b61b048e608fbed5a6599ade0595293e5305136156680b96bccdb6bc77af84f0ea1520a2d79d5b2b75f9860ae71cacce595c720964c42c8a05a663cce8199d06f63b88dd76e359da379bb39b4aacedcdc3f82994ca06d25993babb746c78b5fa7c57cf5de30d538adf3eef062611ba9fdc140a7bb01006bca9710c549063dd3e774b529e527ecbe2876574d9f4856b91b414ffa92acb2630a5e42226844f63368a648eea16d34b61286abe62ea80c42d552d2d1d825a62625657216583b0b618757a2287242153cf03fadf4110da5069bca1ce6deb8c01523710bd3e7a642e52bb9d5214bf2e8b9f1642777e5d83fd3178c7b9471f396e8a3a4b983cf451102895ba99aa62858b9d61bf1c1fe266dcf05e9f2379a6ee0b779fb7dc91cb2fbf8ac939122d452e9965641afbb40248b14cd3bde0fe10042645fb06a7f8bd7458db43f0d449bc1b5f39ad7369238d4716c243a61f2150678aa7ff5d107c537013a932bc6fb2dcb1b5e5a0a9cb4e60b69fc963159ff62e792dab3eb5ccd460e09dd26bca4654543676a8ba09d7d02b422e8866755744b91f86ef800f93de66c1577d3846d861769f0b0f36f7a08a03b69b2416a5390d775512b49c8f4c30641856fa68146a9a73f36c751c03f128f9f17055e17373f10ddfc75bc77058559e6134027310ccba0825ddcb2d1c3b4ba72caaf295e957f3ee7d0e711f59a342f8c95c63ea7ba4247f3d8382ac86e49615b8d7b1d67329e4e383a9f884349fc52f6c2c69530ff1eaac2c3d127d68483f3021b4bd41ddfbcb44d35c5b3dc15054c6ba47399a7373c286e5a08d35858f7959f71de840f045a0e37129498174d0c7753e9bdced48248fa11f4d21019a2b26018cae66ae462dc61ad84862b3675642edf5a779ee83b867837994a394c4b0a3e10dbee73eddd3ab2870b08c4f1dc6bfe9b84914c3ef42de2802e9ce8b43aade7b448f1b6561eb926858f8aeb9e27c0d02c9b1078be6032c0acadff1e37b9562522eb8231e62801aaa7ab015f61868818cd73fe7913401d66fd9c24ec13c4a4ceaf9f2f82772b9e7852e5673af4f32cf9b1a53355714d37ed739de26ebddcc8dc3cce6a1810799367ed19fe9d9ddec7846cbd15d3c090a5e164752bdf36385b09f8fc5d90b117ded76ad7e74332aa6b2936e74604aa3f2aaf9d07272ada53fadd8c3fbbff153ba92fbf57fdad8ddb273ca7a2fa3a2daaaa8266f1e8b08ad84c33e423eea7c00c1db6dbc86ece8de3bf645c107779fb07362e4a44dbc7daf2b689b9f328b37df81d86bb9bf8faa4cbd6e1839e902e813278fb677ba6dffb8415407008a9ccae3109335a2aae91b9bc00e4e9efdb1d7d514c8542e4e99488520dcc39293141d1bdc219538661ea7b05ff652e00113fd54c6d45121136a1fcde883c3ab6f966cf878cae5f6c9525e551aa11e32673b4effe43076803d9d7b5fd93676263e69da90224ac3f9ee6aa6380e30a61ac75ec5fba20d29db46abfdcaf6e669c711b2c0bffa183ddd931a2e5bc91411d39248e9c7db86035478ab806e764ddf4e511a599297e117f85181cc40e838773527d63b957829c08f881c61cd73d83ca22bf626dccf8e3bc06792cf9862b42f5aab81fa6dfb6df7aadf0445210d6c17fa7e49559b8bc846410f7b7dcdf3e212d2c8dcfebb9208ce0c36e50539c61765362239f32db40b00dfb14be2d07fc682a2ed67e4ff62c1a272d3ac8346c1d18afd059c07f59b3f909c80f1f0aec81ec26b1c7197d5736fab39dc0ad35854410401c73ff1c0ffef5511bd6287d67dd24c1cc02385afc6a0cddfc54495f93385f5ad4ddc9d2a825c896f2ee77fe76cdc00373dba4fedbc3d15a3ebc1e63baa606f6e4dd5b146165c87d9f13cc4565c83cda9beb2e6d28669f1f02c54566898a41e14dbb9bba3bf50a469c817eab32e11683273a82f3d117f1af61f3d6f98debc055de6b8edd4dbe70b607951ea5e35ba941dff680f313ae5d58e7e6b0645590233e523b6a3684b621b761f022eebe3a0da9c6ac8ed58367598b8b3ad20bd7bdcb60e92ca20a94e9e0e3de71fb2c7bd908184d9d5149dd5ea7a1f5ab9e96793ae08c18d5978b6cac08e395fbc7abf3d07a28274a55c7b588fe3ee590ea11c0753be04f6444129bddf196ab9865790b67c8aed14bf531950b6670f8fbd1ac92a84e2d6b99b06a642fc4378c8d0e065f78224e36f15b1b1e2d67ad808776ca0c4207e935b5ad62c1f51758bc283823631fd4060723b3a782a677d9b44010aacea103f2d401bab6fad7c50bb427ab96119b6d685401ab99fd435e0d1f74377c3f9a447a69c5e385187d568f960c5657dd974d6ccacacb48fe1f5c2520c672ce134af81b5c0c017f95968b36898acb6cf596ae5d62e1d8e7efe5eb694119f60a539b2ff2ba6c46b85395e6dea4a8ffe18f5e301ede4ce5f98d31f2d864a48dd269ffa32bd8b00a1e42c01bae1b22a525c1bb2f8b45377b76424c27b5d4da4dd882b450210cbca30d843aec0e359c6dca50e2a2686d1e4ffe3327beb404fceb01da82ba2ad1707dd07245186185b628d9a8fbd27c04e9e8a6967e57f27254c27a247827f2a7f671b5ce183730bda091624cf969b8b14f320498bba8b418695ebd677360f17a073fc2a678f892b0dcbe7788f363d0f40c5bb72007b5c25ffe873ecf70f542451ed353bec6da50fc9772ad49ff9eb7560ec4bf48e9d8944cb47010fde38d314a26df2cadc69dfb39ed0cd8974f2493068b7a2ae634b58efccff055f63777fb18fe9b14dcf92c88ebc0c529eb691e572d3c5f17cf454448d27aa18ccc4fb40e896c2a33b7fee7f96e8349702e1340832159a31dcc9f180295cc86fbb6e5fa82c6af6e002d640389a6f6c80c138f5d16cd9b912774ddc5774908a744881c438c940f29e4e7130a9c25002866dae29b08c723ba5a2f19e70e0d234da2138988eb519b7555539e62eded3a00b54b9ea04f3cfcbe273dcc561cc0a8b252d887d9b81cf661cde28952544c7ee26a242f21313c6f38d5ce0ce9f18d82895120d620ce69a477bfe6e53e414f6e04e7b6f1bf2b34a039f28126745bd872627fef51e9d36c037085b55f4194bd85d8d330d1e99555fdce62d325a0523c4997da799a41f894c1417401ac3f69b6a76501f0649fccfcc39899573a074cfc223c04c42fe4881c11c2779525d5db5529d17e2319bc7fd854b42852132308c0e1525dba272f9c8f23d838b358d6a28d60387c9264425d639f965de618cd44a29d001ca8428118821354e5bc5bbc6a1f48e936a2b83a21d97a08b715d9ec6f41b2d392657e0e73b8d241fd1a4ac80330b3490e5e4314cd23cd11b7a17a5436c73b12826a9bc0ad0bdf0a42612adb8cb92e7203357bef47d76cf494f4a13e5750387fbdecdf5af3a2b940aa1be76e6ea7b65b324df35224b8514a0d3e3ed7b09611e8295fdee46721a556080bb95631fb6ad5ae7858099a229f0809415d145afe1b42404690c2639d95c074dacbb8502efac020cedc6b3605f078627bb76e9f683ee63572e5a6e4ead0175760328b03e46fcf860462e73a96e1d00a606dba228fc63ace61b14b06a5b88162eff00e5cf5ccb9e9addfba3627094ebe6d69e6d3717db62fb30a605b5bffb3735713a1b80568c6ec86c699ae54e22b232b01a48fe4c1d4b68657c6c48e03adc0b5fcd35af38b2302a6a50130cc5cef0d9d334d5dcfb7aefff458c5db7d91ce3f1ca403fa2d90472511c8b28d489d067e2026a224956072fa1f790784560150dba8ff3e6457799e5aa087e722165c146fc402f57c91f4586fbbd6dea4c02da79eaca12bc5ea97c733c7002d2064e0cc94d562d617d9adbdae3651112690836deb9393b161d8e085676f68c2fed2d56a8e81c3bd46d3b84ce1f6eeaad4da7caf5f48b9f8bd0d6d259d273111da8523c3997dd48d647646eebed7ed35533d07668569a20177a768996aa04b47a104741a54878f434ba58da73384efd84ef7697e506badd39d7bd77fa69352d65c1ff3990bae5f5f9eda416d8a1c6a4fb6bf1759c04901dcfab8b640f8cf42d69f18432c00d3d804933c45e8de29d6429054a595a36573d5dabe0833406337b5297b14efb558e9e9a6972eadef6893e035a19c83c3dadc90c26c7e9715b3599ae0fe5fb865b5946e7f172b0c03d9aefba0f458592fb98d06262fda03b7b3cfa30171d1e5481900d8f300fd1931cf87ad39006e222dbeb0ef8f454cb1f2292699e8928417618cd1ea0299579d7246ca5c64b813808575ef3164fc2eea9ad449136326258aee9d206a8fcff696857b0b99327fdb2cce53d30589ce4cf56617e08857f34511a8e37dfcff93eaa8e0fb62afe436c4e8f4203fe0724566ad750fef25dd3f70ccf907d94d3bdb610cf18c3937c02d374af93d3a62430eaac872ec03a4e6979021ba2d03236cc0f285a2aa1b497b579aa51bf1e235f960f52e95bde30c6a9aa264020c4c4746577437e74ac49211282e8747c8f9a2ee0f5e1a33b601423517ccc0afc47e6b758341341d6c7a1d29e4ac206d6288ee610a3a2db2a9dadec8fde466f76206ead6dededaf71079ab2193401101ed1dfb058348232bf98115f6d707ed435460d584f0b747d06b31aaefe9e360c061ca36427b37b23df92eed73c0cc8244886b6bc359559ea570b2edd390cdc4368fc9e55526972a5e85a92cfd134c6f013129eadf378bfa2bb8280618da6030a43c95ded4e019511848bd6182baa0536ab8dd85b32a9247a463bac4005aeed014b300975ba801ff34239d13bce4f0d0c7cecb9ed98afc699f5f2257e2eefe168a5c2f7bcbd4595c25edf1bc4def72ef2dab342dda870728b384953204d318f2cfb0dfe9c21ed61bca3a2121b204c13a36a627987c307de9379d06b8014c708c0ab0a178242bc33904604219366c10acf446671c2aa6f3195788eb6b336e9387cc6b37e0a9df121f3d2ec6a2263582f569ead6c4923430388bbedab6b7935acbc71fe423420388cdfa2a0612a94fa2491654cf4a4d6e873b8becf5cfe1cb1afb3bd18f929b9e5c0d517514b45fa57516dd3767bce65240c9f9e533e22d6b36792eb120b9302be87e24515111999df2c2bd752797772c7e8b98e3a4211a953a26c859ea4282e2142c1ced771dea26e4dd6e341e8f67513f867b40bcd0939810bf249bd4546d257f638080e8794a28ffa7f908592e0eb57d3958889cd6f212d8660f6c8ca67340347c38a2aa737174a012f9a8fd1ac5242bc8a80371e14ee94fbb7770086ba626f8efd63a42ec4f926d2bba0dd30e3816b066e31faabe71d1122c9dd67b607c20d588d73b955506d5d2959318b27e381e16f96a02c1d7cb55bdc9bd638cc5d3f14f64ee8d000fcd84540990468b5aa68337a63974482ff6556f0fab9f433154889c3ae466cbbdcdc631115d42bc65707978541dca213547a0b67603fa326d402e766bc37afb2ab9355879ce8f87a5aae872b9ea55fb41fa7cfeb22387ac6a13afdfbc85c7d018e2e7177fae34c5ae9bd881ba9dcfda4aaeb8", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) 22:34:30 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103fd}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:30 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, r6], 0x2}, 0x58) 22:34:30 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) [ 2906.664622] syz-executor.6: attempt to access beyond end of device [ 2906.664622] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2906.666392] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:34:30 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x17}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:30 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) 22:34:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x101) 22:34:43 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) perf_event_open(&(0x7f0000002380)={0x4, 0x80, 0x6, 0x2, 0x7f, 0x8, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x2, 0x1}, 0x3, 0x17, 0x5, 0x7, 0x900000000000000, 0x10001, 0x3f, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3) 22:34:43 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x103fe}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2920.090536] loop6: detected capacity change from 0 to 39 22:34:43 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:43 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x101) 22:34:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0xda}, {0x0, 0x0, 0x27fd}], 0x59012, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="01000020010000001800007a225fbdd541623a00", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00.9file1\x00']) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}, 0x8}}, {{0xa, 0x0, 0x200, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x80000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x4, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x4e23, 0xffffffff, @remote, 0x88ad}}}, 0x108) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x4000, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x10}, {0x0, 0x3ff}, 0x0, 0x4}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x40c04, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3da88329f535d4e5601df1f96f148fe6e14cd618dce09a63c4ba4f2778e53a60dfa93cfecb12fe13477080dcdc196dba1d0527a0ab746027381d379ed95a433bf9663671a085f1edfb262024bd46893301000100f752182f0c5f50c0b8bcab46fb14a186ec888948f37293679974304f3407feb3d891ab1eb9bf1416eb9672a2446baf9af77fc958e7ff48dad9d11113dbefe40ab037e95f318bcfa4a978b808d0be94514f59e200"/186, @ANYRESHEX=r5, @ANYBLOB=',version=9p2000.L,version=9p2000,fscache,nodevmap,fscache,defcontext=system_u,permit_directio,subj_user=vfat\x00,\x00']) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x3, 0x801, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xd657}, 0x8a00, 0x87, 0x7, 0x7, 0x4, 0x7, 0x209, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) 22:34:43 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) [ 2920.155302] syz-executor.6: attempt to access beyond end of device [ 2920.155302] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2920.156276] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:34:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 22:34:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2920.261324] loop6: detected capacity change from 0 to 39 22:34:43 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) ptrace$setopts(0x4200, 0x0, 0x10000, 0x4) 22:34:43 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) 22:34:43 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) syz_io_uring_setup(0x5ad3, &(0x7f0000000000)={0x0, 0x8eac, 0x0, 0x0, 0xa, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:34:43 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x1fffff}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:43 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 22:34:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2920.491076] syz-executor.6: attempt to access beyond end of device [ 2920.491076] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2920.492904] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:34:59 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3ff800, &(0x7f0000000300), 0x1, 0x1, 0x1}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)) r5 = memfd_secret(0x0) io_uring_enter(r5, 0x7859, 0x8dd5, 0x0, &(0x7f0000000240)={[0x6]}, 0x8) syz_io_uring_submit(0x0, r3, 0x0, 0x0) io_uring_enter(r0, 0x7079, 0x25c6, 0x1, &(0x7f0000000200)={[0x400]}, 0x8) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:34:59 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) clone3(&(0x7f0000001480)={0x302010400, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0), {0x34}, &(0x7f0000001300)=""/176, 0xb0, &(0x7f00000013c0)=""/26, &(0x7f0000001400)=[0x0, 0x0], 0x2}, 0x58) 22:34:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x7fff, 0x7fff}, {0x7, 0x7f}]}, 0x14, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:59 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:34:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:34:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:59 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x1000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:59 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xffffff7ffffffc00, 0x32261, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x400, 0x1000}, 0x0, 0xffffffffffffff7f, 0x20, 0x8, 0x25}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x13, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) sync_file_range(r7, 0x1, 0x1, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) [ 2935.831441] loop6: detected capacity change from 0 to 39 [ 2935.874372] syz-executor.6: attempt to access beyond end of device [ 2935.874372] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2935.875836] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:34:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2935.943262] loop6: detected capacity change from 0 to 39 22:34:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000140)='./file0\x00') 22:34:59 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) 22:34:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xdd6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)="c9a8b268958f6632d70f391fceaee0987cef09931852d4ad79d1efc870f8da4d387cb00e486184df1214c1ff31b3020fd55fed25c08367f6f6796373653eca34cbfb3a98411167cf7f4ebf1cf6ba1b0d1049f879f8f943e638fb17060b1b5b023926116e5ce77513", 0x68, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0xa0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:34:59 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x2000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:34:59 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:34:59 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) [ 2936.015443] syz-executor.6: attempt to access beyond end of device [ 2936.015443] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2936.016844] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:34:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:14 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) gettid() 22:35:14 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:35:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x18340, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000ec0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000001200)=ANY=[@ANYBLOB="88080000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x888}, 0x1, 0x0, 0x0, 0x4000000}, 0x20091) r2 = socket(0x1f, 0x4, 0x2) sendmsg$sock(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="ff321d70ba73fa642b4e5de0e5e2ed4d7cf9e09a4b7fdb0aa0931df6376294d8999d55db2c68a48fb1db06a4bfd9b1ef327a82ac28e040221f0926cf96a6d429dd982fede01e14f86d716eee722c1df67fe7881cd4226de9234ce4d161e0f39e05352bd092de87c41890d1f872a66090341c8152e96bdc00a8a64f9115db71a4a0fc22b36245ce151bbf24888e39d539d39099f48f51d1141283c297bcd5feb6ec0bcc9d968680652f74624c180f0a347b60e084f45080437c6362964d50c5c18bd3667a73905852d401c514042ceb161e5514dcea0e2c9adab5e4ae8d31ed55a47b2a", 0xe3}, {&(0x7f0000000300)="53d386157b0798d7f1f16237adc5b539a8c49a2589006fe7bdfb7fa211fa28f3180f0d5dd3f7c598be3391b428bbea227d85d524", 0x34}], 0x2, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0x30}, 0x8000) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x20000017}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @link_local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r9, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:35:14 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x3000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:14 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x4010, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x80000) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) [ 2950.732712] loop6: detected capacity change from 0 to 39 22:35:14 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0x629, 0xb6}) 22:35:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) [ 2950.835674] syz-executor.6: attempt to access beyond end of device [ 2950.835674] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2950.837347] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:35:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000180)="77fcaaef43258c287ddde7e3f017e3", 0xf, 0x9}, {&(0x7f00000001c0)="b2fc922d3a9bc19fdb8a2aa2983dacd1825a210d0bde53f487edbd5e571223ea4183285c9687f45de4bbec440b80871b1e996e3f6ed97940411c3b1dad907b2215280d3e10375a384f846907a51c515cc9e71c5ef830a6a6648c14ff41098582823d8cccee96f035f05c", 0x6a, 0x2}, {&(0x7f0000000300)="7b7f7c7f76a1535f441703f51dfc333db9ff4fb1b7b173abd18ddd7d24b95cff65ba82dd7af03799b1dd9ee3002565e63491be25d28aa2310b863553b92e20a686b9f0bd143a39cd7362d4e626d081bfd95455aca3c3157a1ca95eb663751e2b5ce67d655c0e4a39d25105373c724c77ed77a56a608dad9b9f553fe1e2", 0x7d, 0x5}, {&(0x7f0000000240)="369c4cdb88b57512ecbcb32404076c95b27e78d7706447f771be624fcba1a3ba3d28b57493fe41b9", 0x28, 0x6}, {&(0x7f0000000440)="fa27428ac4558e087df54333bcd058cad2190017392cd06044e2fd4533001a8a4e45778390e5e475aa81520da9356b2bb725a0dc9497560f0bb0e9d5c1ac3dc46149079a8c10e2", 0x47, 0x1000}, {&(0x7f00000004c0)="99b1427295c890b5dfb6cfec0612a9ec7c0509ea97a0c76896ad9524661b13ed6f443af2fd25c952aa7400eebb8af3dbad313d628c6a36fc234f09ebaae1d95446a51c0624e46797377196aad23c78e857d53e99097e7a53d6fcafd7b8522604bc664d0a721f28368500f37e0b9557014edfc8d437dc55ec74079f3bac9f548a23765a3c32286f29a26781cfd196a7", 0x8f, 0x3f}, {&(0x7f0000000580)="68b3627b1454", 0x6}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES32]) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:14 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) 22:35:14 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:35:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:14 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x4000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x30, r2, 0x7f) r3 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0x1) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x2}) r6 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000000c0)={0x20000017}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r7, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) 22:35:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:14 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 2951.194428] loop6: detected capacity change from 0 to 39 [ 2951.469752] syz-executor.6: attempt to access beyond end of device [ 2951.469752] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2951.472301] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:35:27 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) 22:35:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2a) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:27 executing program 4: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(0xffffffffffffffff, r0, 0x0) epoll_pwait2(r4, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x6]}, 0x8) 22:35:27 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:35:27 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:27 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x440180, 0x18a) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x2, 0x0, r5, &(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x800, 0x400, 0x1}, 0x6) 22:35:27 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x5000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2963.841079] loop6: detected capacity change from 0 to 39 22:35:27 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:27 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) 22:35:27 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x6000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:27 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, &(0x7f00000000c0)) 22:35:27 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:35:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) 22:35:41 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x30000008}) 22:35:41 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = dup2(0xffffffffffffffff, r0) readahead(r4, 0x4, 0x5db) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x14}) dup3(r0, r1, 0x0) 22:35:41 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) sendfile(r7, r8, &(0x7f0000000040)=0x3, 0xbe7) fcntl$dupfd(r5, 0x0, r6) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r6, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd_index=0x5, 0x7, &(0x7f0000000700)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/213, 0xd5}], 0x7, 0x12, 0x1}, 0x5) dup3(r0, r2, 0x0) 22:35:41 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x7000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:41 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:35:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000180)='./file1\x00', 0x8001, 0x330) close_range(r2, 0xffffffffffffffff, 0x0) accept4(r2, &(0x7f0000000040)=@ethernet={0x0, @multicast}, &(0x7f00000000c0)=0x80, 0x80000) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2977.816184] loop6: detected capacity change from 0 to 39 22:35:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) 22:35:41 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) 22:35:41 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/153, 0x99}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) 22:35:41 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x8000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:41 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) 22:35:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) [ 2978.102213] syz-executor.6: attempt to access beyond end of device [ 2978.102213] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2978.104144] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:35:41 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:35:41 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x20000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) 22:35:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) 22:35:55 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="7a1817756b831ab75dc6e69d8348a2c13c3f1a1b8e8711fcb5e62573670789a6467de5696c0ed2f45c2e35548508b8854606d0ffda2109bc89ac65be73432c0e21df7981e6c33d1b410ec894276e94bcb22e8559167086b831cc2851f2149dcf6dfed5a7cdfadcf003861395cf58feda18cdb0dfd10e702b8452437073b06c9d15a917f5ad02c6953bd7c0f98ad0f80b4e23e6daeb455366906f2cf0154373b136bab2e7f0be4c6e49d0103b789bead6cc18b3d0e7eef97697ad36589ec9c1dba55905e8fe72b05422d6695bce205bb587fde04cb081", 0xd6}, {&(0x7f0000002280)="c533726bd44d202575f3a93ef9b81e0e5b8e5b7ee7ce72be50f0b75b880cc6108dc49ae68eedec3aefdba6fa6671c98a6d301c8099f768aa545b1c22459275203fd34a61b327a43f39f04666c9145c6554b8050df5ae12f1d1f7816131c4350e0f1f68302069504f553c1b5229010d8d83ac1f37920e651817fcd35877c7f33a3e1f16c6d33ed3ebb465d7602baff287e5101f704d596f0f0e26dc604a12bc7ab556065e474edcd63a72b932c18563e926f33be41e3bb33b444e3e6f3647c0c3dc4d908a9a7952e0e0539b6e78485f13a01b90da9eec29bd88704350bfc9540c406b0128a1fd04", 0xe7}, {&(0x7f0000000300)="31e7ec64c8fc5b3af449fb96215edcfbc72a2b04b976e52b6f65c48c0b7ab898058a04546e16d7c6d970f2e514a62d6451fdf8bf6542a474169a0fa8443a04bbc4c31719348753e2f89b549b17cb6841aa5ef2a540c330f28eaa2dd43fed884a9b4c61aadef7dd87e302140e007157bac98c4eedce809b765ea01900c269f9b0ffc856400e880af11182aea997a4f6ba75967e5b49de4a8a26b8faedeec1b140e1db8d1d853d4c44885188b5f09d90875188d8bc8ba117306fd1a2a518ae61d19e3c82169dd5e2e0d55d111c7d2d3dbdd7d2c88eacf80ae62a29d3c3e759787d7b2b69b1d237dc2cfc06f0d354cafe39882f0a", 0xf3}, {&(0x7f0000000400)="00000000576bb74f8778937f7bf1347061082fc4a170368a83826c0862047b3d68df55aca7c27cbee2259d88666a1fd5056d3c6b1baab27fe1bf22abd1823ad883e699cdcc201a692b361dd644fe8f651c", 0x51}, {&(0x7f0000001200)="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", 0x1000}], 0x5, 0xc, 0x1, {0x0, r3}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) 22:35:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) stat(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:55 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:35:55 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r4, 0x0, r5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x67}], 0x4, 0x8}, 0x2) dup3(r0, r1, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r9, 0x10000000) 22:35:55 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x440100) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={0x0, @generic={0x21, "bc406ec62b1cc25c9af88d714ba0"}, @isdn={0x22, 0x80, 0x80, 0xc, 0x6}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x9, 0x0, 0x0, 0x0, 0x14, &(0x7f0000000040)='batadv0\x00', 0x9, 0x0, 0x6}) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x74aa, &(0x7f0000000000)={0x0, 0x1196, 0x0, 0x0, 0x175, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r9 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x0, @fd, 0x8, &(0x7f0000000140)=""/180, 0xb4, 0x9, 0x0, {0x0, r10}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x1, {0x0, r10}}, 0x9) r11 = dup3(r0, r2, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r12, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r11, 0x0, &(0x7f0000000200)='./file0\x00', 0x3, 0xc8480, 0x12345}, 0x9) 22:35:55 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x3e000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 2992.165398] loop6: detected capacity change from 0 to 39 22:35:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x11, 0xe, 0x0, 0x0) [ 2992.333608] syz-executor.6: attempt to access beyond end of device [ 2992.333608] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2992.335483] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:35:55 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) 22:35:55 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000008}) 22:35:55 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x3f000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:35:55 executing program 4: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x1000) dup3(r0, r1, 0x0) 22:35:55 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) 22:35:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:56 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) 22:35:56 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create(0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000008}) 22:35:56 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) [ 2992.729511] loop6: detected capacity change from 0 to 39 [ 2992.861097] syz-executor.6: attempt to access beyond end of device [ 2992.861097] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 2992.862818] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:09 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2002}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:36:09 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r2, 0x0, 0x0) statx(r1, &(0x7f0000001780)='./file1\x00', 0x800, 0x400, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001a80)) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r5, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2, 0xa, &(0x7f0000001680)=[{&(0x7f0000000240)="475c46b6b4bd74b1aed19c48ecf0298641fb2a19ca39fd83b5a9ebe47c536e801f125b80cccbefa1e325315223f1837d17a285ff1b2382103c62c506a3f02dd196cf5044c3ee88b4b390cd39d4d7b95f2494ea4b6238be998a2ecfef88c501441b960775322ec7752ae96f6b16598e852b2f66f342d91bb057bbfee0224c25b576bab602a0ee5c8b7535df40132be41780d948d4d43b6dea", 0x98, 0x280000}, {&(0x7f0000000300)="bd869aba531d73ed3538c25d0babd75c6795084ccfa1c9e128a92f30e6c379f24ffe27397fb47e1ec750b71748fdb51b2bf46c9a27f0caa46584dccc3621b39b41665aab512ef64582d9e1d14b1a09ad95e0b019f3dc6d3684921c599f89d10812b6a4928b7b1fa5acfd0359ea2703984e7c214d319c324e436a1a50e92c89ab902f503899da2f819603c1782ab65270420986d2828fe1e2209e27470f0e7f1e109698d547a00299eb4d96694d07c120af33692289bd01f926f89c0cadbd040cbb0d2df7c60841f557a94c060b62452ac271b6d921c1c951531312a3963686107f427b017d9d4620f4239db2558731", 0xef, 0xe3}, {&(0x7f00000000c0)="7744bc77e467c44709df28e68ade5dba2f920f026c8178fcc913cdd653750ae407ba4ab258c881f0c5112b15c95c2a2c0bf3c38c3ce6efab39ba3b05a365", 0x3e, 0x8001}, {&(0x7f0000000180)="e0de0f9b269b2b870205d858800f", 0xe, 0xc57f}, {&(0x7f00000001c0)="4c2f08bc3e4169a096e1ae8e817c2c3a98a45a2d2d00912dbea02be750d2edef3eba5a9ad790f658c9a8392cdec94b0e00fa46fa1e210d", 0x37, 0xf61b}, {&(0x7f0000000400)="bdbd842de429baea3d2f6f181c38d5cde5a8b600c999b55d631d39b8f7bc73bc455a7be54f1e6765e726973a6bd3966fe58d3634ff0036d4d866f549beeae13b259f758c825886", 0x47, 0x15}, {&(0x7f0000000480)="370427134e29957e5e9e838ddaa8e6fac68ee0261e00493dc2d331f8eaae0cb0199330448b5831554261a423688c891f1bd503b19d0f043f45fb9dc8a0f35372d1a441ddf4b057b95405307ab4e52beb1610b1f15da9613b5a29622eda83176deb346b65fee729b2e4d693865f4896253cab32f6771bf25934a6475f7c9e6f0e8c1468169ed1369f2e7e2f4a5d54e4c8d440f1a7f2e02be6daaa9bcef1b540f6d2a2978cac", 0xa5, 0x4e}, {&(0x7f0000000540)="93ddc67c1cd1bd4f0385d4d2271f15c634281909d78dda7a0a6b04300cdc4fa1cbf22684318809dc4f59f0ee98595ea3b9771530817e7e9d9a88b318c3c989af3eb0bfcfb9bfe08f2f870d714024cb54eea2b45056c8fcc4610c15c011aaa5c68eaaec4613a7325ec02e54a53f8527c5f67c641396a147cd33b25f4b9033f110a7a8bdc651355047665e4d086ae518c036d625273849db5f81ba1867bd671af306661667dbc8ed73f3d2bad1a3779aa809", 0xb1, 0x5}, {&(0x7f0000000600)="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", 0x1000, 0x1}, {&(0x7f0000001600)="d0eb23a40c215b93a68a5348c7b5d2ef43c226bbf7d162c56a08819164dd96b67bf18afcad9b5f8bcac8a1094d7cc3427a4f616459359724d2bc517100d7dad1016656a0bb6caf230aecf2055c352bb2aa95a61e959f529a51862c997bfb913084dc4fe205134c51dcd942189cd1", 0x6e, 0xdb9}], 0x800020, &(0x7f0000001980)={[{@huge_advise}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x35]}}], [{@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@seclabel}, {@fowner_lt={'fowner<', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x40}}]}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:09 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) 22:36:09 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:09 executing program 2: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) 22:36:09 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x48000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3005.712707] loop6: detected capacity change from 0 to 39 22:36:09 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xe, 0x0, 0x0) [ 3005.802896] syz-executor.6: attempt to access beyond end of device [ 3005.802896] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3005.803932] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:09 executing program 2: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x7fff, 0x7fff}, {0x7, 0x7f}]}, 0x14, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:09 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x4c000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 3005.995264] loop6: detected capacity change from 0 to 39 22:36:09 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 3006.133104] syz-executor.6: attempt to access beyond end of device [ 3006.133104] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3006.134993] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x7fff, 0x7fff}, {0x7, 0x7f}]}, 0x14, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:23 executing program 2: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:23 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = epoll_create(0x1) r4 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x20000017}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)=[r6]}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x480082, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r7, 0x6, 0x7f, 0x3, 0x11, 0x0, {0x0, r8}}, 0x8000) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r3, 0x0) 22:36:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:23 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x68000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:23 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:23 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 3020.114399] loop6: detected capacity change from 0 to 39 22:36:23 executing program 2: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x200, 0x8, 0xfffffffc, 0x4174}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:23 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) [ 3020.259218] syz-executor.6: attempt to access beyond end of device [ 3020.259218] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3020.260262] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:23 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x6c000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:23 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = epoll_create(0x1) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x20000017}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x294b, &(0x7f0000000000)={0x0, 0x4141, 0x1, 0x2, 0x26f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd=r0, 0x20, &(0x7f0000000300)=""/249, 0xf9, 0x0, 0x1, {0x0, r6}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_setup(0x3f83, &(0x7f0000000400)={0x0, 0x6c3a, 0x8, 0x0, 0x170}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000480)) syz_io_uring_submit(0x0, r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) [ 3020.477388] loop6: detected capacity change from 0 to 39 22:36:23 executing program 2: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) [ 3020.621120] syz-executor.6: attempt to access beyond end of device [ 3020.621120] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3020.622486] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x7fff, 0x7fff}, {0x7, 0x7f}]}, 0x14, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:39 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x74000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:39 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:36:39 executing program 2: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) 22:36:39 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:39 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 3036.357090] loop6: detected capacity change from 0 to 39 [ 3036.503933] syz-executor.6: attempt to access beyond end of device [ 3036.503933] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3036.505748] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:40 executing program 2: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) 22:36:40 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) 22:36:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:40 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x7a000000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:40 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) [ 3036.826001] loop6: detected capacity change from 0 to 39 22:36:40 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000001c0)=0x5) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000180)) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:36:40 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x84600000}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:40 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) [ 3037.043466] syz-executor.6: attempt to access beyond end of device [ 3037.043466] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3037.045473] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:54 executing program 0: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000008}) 22:36:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:54 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x8000200c}) r6 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f00000000c0)={0x20000017}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r7, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:36:54 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:54 executing program 2: epoll_create(0x1) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:54 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:54 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0x97ffffff}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) [ 3050.569341] loop6: detected capacity change from 0 to 39 22:36:54 executing program 2: epoll_create(0x1) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3050.733545] syz-executor.6: attempt to access beyond end of device [ 3050.733545] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3050.735582] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:36:54 executing program 2: epoll_create(0x1) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x30000008}) 22:36:54 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:36:54 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000180)={0x0, 0x2fb5, 0x0, 0xfffffffe, 0x4, 0x0, 0x0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:36:54 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0xaf7f2be9}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:36:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:54 executing program 2: r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) [ 3050.958944] loop6: detected capacity change from 0 to 39 [ 3051.088968] syz-executor.6: attempt to access beyond end of device [ 3051.088968] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3051.091256] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:37:10 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0xe3030100}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:37:10 executing program 5: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:10 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x5}, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x800) socketpair(0x5, 0x4, 0x82, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) dup3(r0, r1, 0x0) 22:37:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:10 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:10 executing program 2: r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) [ 3067.020032] loop6: detected capacity change from 0 to 39 22:37:10 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:10 executing program 2: r0 = epoll_create(0x1) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000008}) 22:37:10 executing program 5: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 3067.148540] syz-executor.6: attempt to access beyond end of device [ 3067.148540] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3067.149584] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:37:10 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0xe4030100}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:37:10 executing program 4: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:10 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 22:37:10 executing program 5: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 3067.363140] loop6: detected capacity change from 0 to 39 22:37:10 executing program 4: r0 = epoll_create(0x1) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:10 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) [ 3067.496721] syz-executor.6: attempt to access beyond end of device [ 3067.496721] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3067.498069] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:37:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:25 executing program 4: r0 = epoll_create(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:25 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0xe4ffffff}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:37:25 executing program 5: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) [ 3082.471909] loop6: detected capacity change from 0 to 39 22:37:25 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 22:37:25 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x3) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 22:37:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:26 executing program 4: r0 = epoll_create(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:26 executing program 5: r0 = epoll_create(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017}) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:26 executing program 2: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) [ 3082.652585] syz-executor.6: attempt to access beyond end of device [ 3082.652585] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3082.654884] Buffer I/O error on dev loop6, logical block 10, lost async page write 22:37:26 executing program 4: r0 = epoll_create(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) 22:37:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) getsockopt(r2, 0x3, 0x0, 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x200) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x4, 0x80, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x51000, 0x3, 0xffff, 0x7, 0x8aa, 0x9, 0x4, 0x0, 0x10000, 0x0, 0xd7}, 0x0, 0x10, r3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:26 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000017, 0xe5030100}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000001440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd, 0x0, &(0x7f0000001400)=[{&(0x7f0000001240)=""/84, 0x54}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f0000001480)=""/17, 0x11}], 0x4, 0x8}, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000080)={{}, {0x0, 0x3ff}, 0x0, 0x4}) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x10}}, 0x4) 22:37:26 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0x1) r2 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x4, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$packet(r6, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) [ 3082.927434] loop6: detected capacity change from 0 to 39 [ 3083.108611] syz-executor.6: attempt to access beyond end of device [ 3083.108611] loop6: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 3083.110507] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 3083.783673] ================================================================== [ 3083.784852] BUG: KASAN: use-after-free in __lock_acquire+0x42c5/0x5e70 [ 3083.785908] Read of size 8 at addr ffff88801bbcb458 by task syz-executor/14222 [ 3083.787057] [ 3083.787322] CPU: 1 PID: 14222 Comm: syz-executor Not tainted 5.19.0-rc5-next-20220706 #1 [ 3083.788525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3083.790216] Call Trace: [ 3083.790619] [ 3083.790968] dump_stack_lvl+0x8b/0xb3 [ 3083.791579] print_report.cold+0x5e/0x5e1 [ 3083.792232] ? __lock_acquire+0x42c5/0x5e70 [ 3083.792898] kasan_report+0xb1/0x1b0 [ 3083.793482] ? __lock_acquire+0x42c5/0x5e70 [ 3083.794170] __lock_acquire+0x42c5/0x5e70 [ 3083.794818] ? lock_chain_count+0x20/0x20 [ 3083.795461] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3083.796280] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3083.797370] ? finish_task_switch.isra.0+0x230/0x8a0 [ 3083.798717] lock_acquire+0x1a2/0x530 [ 3083.799777] ? kmemleak_scan+0x21d/0x16f0 [ 3083.800332] ? lock_release+0x750/0x750 [ 3083.800866] ? mark_held_locks+0x9e/0xe0 [ 3083.801413] ? call_rcu+0x585/0xa20 [ 3083.801896] ? call_rcu+0x585/0xa20 [ 3083.802404] ? _raw_spin_lock_irq+0x41/0x50 [ 3083.802979] _raw_spin_lock_irq+0x32/0x50 [ 3083.803518] ? kmemleak_scan+0x21d/0x16f0 [ 3083.804077] kmemleak_scan+0x21d/0x16f0 [ 3083.804616] ? paint_ptr+0xc0/0xc0 [ 3083.805100] ? strncpy_from_user+0x204/0x3d0 [ 3083.805698] kmemleak_write+0x56c/0x680 [ 3083.806265] ? kmemleak_scan+0x16f0/0x16f0 [ 3083.806863] ? debugfs_file_get+0x1ce/0x440 [ 3083.807468] ? debugfs_file_put+0xd0/0xd0 [ 3083.808051] full_proxy_write+0x11d/0x190 [ 3083.808629] ? full_proxy_poll+0x170/0x170 [ 3083.809224] vfs_write+0x264/0xac0 [ 3083.809729] ksys_write+0x127/0x250 [ 3083.810249] ? __ia32_sys_read+0xb0/0xb0 [ 3083.810822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3083.811536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3083.812252] do_syscall_64+0x3b/0x90 [ 3083.812786] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3083.813491] RIP: 0033:0x7fb8058a95c3 [ 3083.813997] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 3083.816405] RSP: 002b:00007fff360c88d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3083.817399] RAX: ffffffffffffffda RBX: 00007fff360c8f18 RCX: 00007fb8058a95c3 [ 3083.818345] RDX: 0000000000000004 RSI: 00007fb80595fed9 RDI: 0000000000000003 [ 3083.819268] RBP: 0000000000000003 R08: 0000000000000c0b R09: 00007fff361f6080 [ 3083.820195] R10: 00007fff361f6090 R11: 0000000000000246 R12: 00007fb8058abb10 [ 3083.821112] R13: 00007fff360c9ee3 R14: 0000000000000000 R15: 00000000002f0bea [ 3083.822044] [ 3083.822360] [ 3083.822591] Allocated by task 14224: [ 3083.823074] kasan_save_stack+0x1e/0x40 [ 3083.823625] __kasan_slab_alloc+0x66/0x80 [ 3083.824194] kmem_cache_alloc+0x1b1/0x490 [ 3083.824755] __create_object.isra.0+0x3d/0xc10 [ 3083.825389] kmem_cache_alloc+0x247/0x490 [ 3083.825960] __alloc_file+0x21/0x230 [ 3083.826493] alloc_empty_file+0x6d/0x170 [ 3083.827055] path_openat+0xe1/0x2890 [ 3083.827577] do_filp_open+0x1aa/0x400 [ 3083.828104] do_sys_openat2+0x16d/0x4c0 [ 3083.828649] __x64_sys_openat+0x13f/0x1f0 [ 3083.829216] do_syscall_64+0x3b/0x90 [ 3083.829745] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3083.830452] [ 3083.830690] Freed by task 13: [ 3083.831120] kasan_save_stack+0x1e/0x40 [ 3083.831662] kasan_set_track+0x21/0x30 [ 3083.832172] kasan_set_free_info+0x20/0x30 [ 3083.832730] __kasan_slab_free+0x108/0x190 [ 3083.833288] kmem_cache_free+0xfb/0x600 [ 3083.833809] rcu_core+0x7e2/0x2080 [ 3083.834286] __do_softirq+0x1c8/0x8cc [ 3083.834793] [ 3083.835027] Last potentially related work creation: [ 3083.835655] kasan_save_stack+0x1e/0x40 [ 3083.836175] __kasan_record_aux_stack+0x97/0xa0 [ 3083.836793] call_rcu+0x6a/0xa20 [ 3083.837248] kmem_cache_free+0xc1/0x600 [ 3083.837778] rcu_core+0x7e2/0x2080 [ 3083.838266] __do_softirq+0x1c8/0x8cc [ 3083.838775] [ 3083.839004] Second to last potentially related work creation: [ 3083.839788] kasan_save_stack+0x1e/0x40 [ 3083.840331] __kasan_record_aux_stack+0x97/0xa0 [ 3083.840976] call_rcu+0x6a/0xa20 [ 3083.841443] kfree+0xbb/0x5d0 [ 3083.841878] security_cred_free+0xc0/0x120 [ 3083.842487] put_cred_rcu+0x73/0x390 [ 3083.843014] __put_cred+0x12e/0x180 [ 3083.843526] revert_creds+0xaf/0xd0 [ 3083.844045] do_faccessat+0x2e7/0x810 [ 3083.844576] do_syscall_64+0x3b/0x90 [ 3083.845102] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3083.845806] [ 3083.846061] The buggy address belongs to the object at ffff88801bbcb440 [ 3083.846061] which belongs to the cache kmemleak_object of size 368 [ 3083.847718] The buggy address is located 24 bytes inside of [ 3083.847718] 368-byte region [ffff88801bbcb440, ffff88801bbcb5b0) [ 3083.849260] [ 3083.849498] The buggy address belongs to the physical page: [ 3083.850259] page:0000000049e00961 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bbca [ 3083.851499] head:0000000049e00961 order:1 compound_mapcount:0 compound_pincount:0 [ 3083.852514] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 3083.853315] raw: 0100000000010200 0000000000000000 dead000000000001 ffff88800784f780 [ 3083.854361] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 3083.855389] page dumped because: kasan: bad access detected [ 3083.856137] [ 3083.856372] Memory state around the buggy address: [ 3083.857025] ffff88801bbcb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3083.857987] ffff88801bbcb380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3083.858972] >ffff88801bbcb400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 3083.859946] ^ [ 3083.860765] ffff88801bbcb480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3083.861733] ffff88801bbcb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3083.862710] ================================================================== [ 3083.863667] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 22:37:27 Registers: info registers vcpu 0 RAX=0000000000000046 RBX=0000000000000001 RCX=0000000000000000 RDX=ffffffff85032900 RSI=ffffffff813603c3 RDI=ffff88806ce2a640 RBP=ffff88806ce2a640 RSP=ffff88806ce09e18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88806ce2a640 R13=ffff88806ce2a6c0 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff841c1ab6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f7e1ba344 CR3=000000000e568000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 746f72702f637465 2f00656372000a23 YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 3270682820262620 294c4c554e203d21 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8241e261 RDI=ffffffff873e66a0 RBP=ffffffff873e6660 RSP=ffff888046207358 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff873e6660 R14=0000000000000010 R15=ffffffff8241e250 RIP=ffffffff8241e2b9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555f8b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a2fcac80e0 CR3=0000000045314000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 00000000ff000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 25203a646672656d 6974206574616572 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000020000000 2000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000