uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:26:44 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:26:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 716.597401] loop3: detected capacity change from 0 to 40 [ 716.617477] FAT-fs (loop3): bogus number of reserved sectors [ 716.617488] FAT-fs (loop3): Can't find a valid FAT filesystem [ 716.660892] loop7: detected capacity change from 0 to 40 14:26:44 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 716.678932] FAT-fs (loop7): bogus number of reserved sectors [ 716.678951] FAT-fs (loop7): Can't find a valid FAT filesystem 14:26:44 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:26:44 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:26:44 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:26:44 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:26:44 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:01 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 734.520936] loop7: detected capacity change from 0 to 40 14:27:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:01 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:01 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:01 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:01 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:01 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 734.541583] loop3: detected capacity change from 0 to 40 [ 734.549250] FAT-fs (loop3): invalid media value (0x00) [ 734.549263] FAT-fs (loop3): Can't find a valid FAT filesystem [ 734.569552] FAT-fs (loop7): invalid media value (0x00) [ 734.569578] FAT-fs (loop7): Can't find a valid FAT filesystem 14:27:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:02 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:02 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:02 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:02 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:02 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:02 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:02 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:02 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 747.848187] loop3: detected capacity change from 0 to 40 14:27:15 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:15 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 747.908424] FAT-fs (loop3): invalid media value (0x00) [ 747.908450] FAT-fs (loop3): Can't find a valid FAT filesystem 14:27:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 747.936060] loop7: detected capacity change from 0 to 40 [ 747.945869] FAT-fs (loop7): invalid media value (0x00) [ 747.945882] FAT-fs (loop7): Can't find a valid FAT filesystem 14:27:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 761.914848] loop7: detected capacity change from 0 to 40 14:27:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:29 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:29 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:29 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:29 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 761.926033] loop3: detected capacity change from 0 to 40 [ 761.936543] FAT-fs (loop3): invalid media value (0x00) [ 761.936556] FAT-fs (loop3): Can't find a valid FAT filesystem [ 761.939162] FAT-fs (loop7): invalid media value (0x00) [ 761.939181] FAT-fs (loop7): Can't find a valid FAT filesystem 14:27:29 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:29 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:29 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:29 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:29 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:43 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:43 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:43 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 776.037339] loop3: detected capacity change from 0 to 40 [ 776.039735] loop7: detected capacity change from 0 to 40 14:27:43 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 776.077320] FAT-fs (loop7): invalid media value (0x00) [ 776.077346] FAT-fs (loop7): Can't find a valid FAT filesystem [ 776.082617] FAT-fs (loop3): invalid media value (0x00) [ 776.082636] FAT-fs (loop3): Can't find a valid FAT filesystem 14:27:43 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:27:43 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:43 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:43 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:58 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:27:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 791.199354] loop7: detected capacity change from 0 to 40 14:27:58 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:27:58 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:58 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:27:58 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:58 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 791.229709] FAT-fs (loop7): invalid media value (0x00) [ 791.229723] FAT-fs (loop7): Can't find a valid FAT filesystem [ 791.229994] loop3: detected capacity change from 0 to 40 [ 791.280215] FAT-fs (loop3): invalid media value (0x00) [ 791.280240] FAT-fs (loop3): Can't find a valid FAT filesystem 14:27:58 executing program 0: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:58 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:58 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:27:58 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:59 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:27:59 executing program 0: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:59 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:27:59 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:27:59 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:15 executing program 0: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:28:15 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:15 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 808.019700] loop3: detected capacity change from 0 to 40 14:28:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) [ 808.047441] FAT-fs (loop3): invalid media value (0x00) [ 808.047457] FAT-fs (loop3): Can't find a valid FAT filesystem [ 808.073815] loop7: detected capacity change from 0 to 40 [ 808.112471] FAT-fs (loop7): invalid media value (0x00) [ 808.112495] FAT-fs (loop7): Can't find a valid FAT filesystem 14:28:15 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:15 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:15 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:28:15 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:15 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:15 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:28:15 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:28 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:28 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:28:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:28 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:28 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:28:28 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:28 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 821.424397] loop3: detected capacity change from 0 to 40 [ 821.434980] loop7: detected capacity change from 0 to 40 [ 821.456007] FAT-fs (loop3): bogus number of FAT sectors [ 821.456028] FAT-fs (loop3): Can't find a valid FAT filesystem [ 821.458888] FAT-fs (loop7): bogus number of FAT sectors [ 821.458907] FAT-fs (loop7): Can't find a valid FAT filesystem 14:28:28 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:29 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:29 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:29 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:29 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:28:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:29 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 821.779346] loop2: detected capacity change from 0 to 40 [ 821.796246] FAT-fs (loop2): invalid media value (0x00) [ 821.796260] FAT-fs (loop2): Can't find a valid FAT filesystem 14:28:29 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:29 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 834.967911] loop2: detected capacity change from 0 to 40 [ 834.990240] FAT-fs (loop2): bogus number of FAT sectors [ 834.990252] FAT-fs (loop2): Can't find a valid FAT filesystem [ 835.000951] loop3: detected capacity change from 0 to 40 14:28:42 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:42 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:42 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:42 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:42 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 835.007190] FAT-fs (loop3): bogus number of FAT sectors [ 835.007201] FAT-fs (loop3): Can't find a valid FAT filesystem [ 835.017992] loop7: detected capacity change from 0 to 40 [ 835.018860] loop5: detected capacity change from 0 to 40 [ 835.033026] FAT-fs (loop7): bogus number of FAT sectors [ 835.033037] FAT-fs (loop7): Can't find a valid FAT filesystem [ 835.035907] FAT-fs (loop5): invalid media value (0x00) [ 835.035918] FAT-fs (loop5): Can't find a valid FAT filesystem 14:28:42 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:42 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:42 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:42 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:56 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:56 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:56 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:28:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 849.230845] loop7: detected capacity change from 0 to 40 [ 849.234182] loop3: detected capacity change from 0 to 40 [ 849.239808] FAT-fs (loop3): bogus number of FAT sectors [ 849.239819] FAT-fs (loop3): Can't find a valid FAT filesystem [ 849.254510] FAT-fs (loop7): bogus number of FAT sectors [ 849.254528] FAT-fs (loop7): Can't find a valid FAT filesystem 14:28:56 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:56 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:56 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:28:56 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:57 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:57 executing program 2: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:28:57 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) [ 863.605883] loop2: detected capacity change from 0 to 40 14:29:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:29:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 863.616032] loop7: detected capacity change from 0 to 40 write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 863.626480] loop3: detected capacity change from 0 to 40 [ 863.633303] FAT-fs (loop2): bogus number of reserved sectors [ 863.633313] FAT-fs (loop2): Can't find a valid FAT filesystem 14:29:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:29:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:29:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:29:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:25 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:25 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:29:25 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:25 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:25 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:29:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 878.111336] loop3: detected capacity change from 0 to 40 [ 878.147838] loop2: detected capacity change from 0 to 40 [ 878.150818] loop7: detected capacity change from 0 to 40 14:29:25 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:29:25 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:25 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:25 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:29:25 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:29:26 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:39 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:39 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:29:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:39 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:39 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:29:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:39 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 892.260627] loop2: detected capacity change from 0 to 40 [ 892.260837] loop3: detected capacity change from 0 to 40 [ 892.262449] loop7: detected capacity change from 0 to 40 [ 892.274380] FAT-fs (loop2): bogus number of reserved sectors [ 892.274390] FAT-fs (loop2): Can't find a valid FAT filesystem 14:29:39 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:39 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:39 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:39 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:40 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:29:40 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:40 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 907.163217] loop3: detected capacity change from 0 to 40 14:29:54 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:29:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:54 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 907.175899] loop7: detected capacity change from 0 to 40 14:29:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:29:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) [ 907.359125] loop4: detected capacity change from 0 to 40 14:29:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:54 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:29:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:55 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:29:55 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:55 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:29:55 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:10 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:30:10 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 922.884932] loop7: detected capacity change from 0 to 40 [ 922.887763] loop3: detected capacity change from 0 to 40 14:30:10 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:10 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:10 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:10 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:30:10 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 1) 14:30:10 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:10 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 923.387279] FAULT_INJECTION: forcing a failure. [ 923.387279] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 923.387313] CPU: 1 PID: 6665 Comm: syz-executor.4 Not tainted 5.18.0-next-20220602 #1 [ 923.387336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 923.387350] Call Trace: [ 923.387356] [ 923.387364] dump_stack_lvl+0x8b/0xb3 [ 923.387409] should_fail.cold+0x5/0xa [ 923.387448] _copy_from_user+0x2a/0x170 [ 923.387476] io_uring_setup+0x86/0x150 [ 923.387517] ? lock_is_held_type+0xd7/0x130 [ 923.387551] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 923.387585] ? vfs_write+0x422/0xac0 [ 923.387616] ? fput+0x2b/0x190 [ 923.387651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 923.387682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 923.387728] do_syscall_64+0x3b/0x90 14:30:10 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) [ 923.387752] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 923.387780] RIP: 0033:0x7f06dc9b2b19 [ 923.387796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.387816] RSP: 002b:00007f06d9f28108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 923.387838] RAX: ffffffffffffffda RBX: 00007f06dcac5f60 RCX: 00007f06dc9b2b19 [ 923.387852] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 923.387866] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 923.387879] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 923.387892] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 923.387931] 14:30:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:11 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 1) [ 923.789420] FAULT_INJECTION: forcing a failure. [ 923.789420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.789452] CPU: 0 PID: 6681 Comm: syz-executor.0 Not tainted 5.18.0-next-20220602 #1 [ 923.789474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 923.789488] Call Trace: [ 923.789493] [ 923.789501] dump_stack_lvl+0x8b/0xb3 [ 923.789545] should_fail.cold+0x5/0xa [ 923.789582] _copy_from_user+0x2a/0x170 [ 923.789612] io_uring_setup+0x86/0x150 [ 923.789651] ? lock_is_held_type+0xd7/0x130 [ 923.789684] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 923.789716] ? vfs_write+0x422/0xac0 [ 923.789746] ? fput+0x2b/0x190 [ 923.789780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 923.789809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 923.789847] do_syscall_64+0x3b/0x90 [ 923.789869] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 923.789897] RIP: 0033:0x7f2f19620b19 [ 923.789913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.789933] RSP: 002b:00007f2f16b96108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 923.789953] RAX: ffffffffffffffda RBX: 00007f2f19733f60 RCX: 00007f2f19620b19 [ 923.789967] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 923.789980] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 923.789992] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 923.790005] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 923.790041] 14:30:25 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) 14:30:25 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:25 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:25 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:25 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:25 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) [ 938.041729] loop7: detected capacity change from 0 to 40 [ 938.052269] loop3: detected capacity change from 0 to 40 14:30:25 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:25 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) 14:30:25 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:25 executing program 5: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:43 executing program 6: syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:43 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:43 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) 14:30:43 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) [ 956.036695] loop3: detected capacity change from 0 to 40 14:30:43 executing program 5: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:43 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 956.052099] loop7: detected capacity change from 0 to 40 14:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:43 executing program 6: syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:43 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) 14:30:43 executing program 5: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 956.201499] loop3: detected capacity change from 0 to 40 14:30:43 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) 14:30:43 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) r6 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r6}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 956.253948] loop7: detected capacity change from 0 to 40 14:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:43 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 956.366919] loop3: detected capacity change from 0 to 40 14:30:58 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:30:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) 14:30:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:58 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:58 executing program 6: syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:58 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) [ 971.094944] loop3: detected capacity change from 0 to 40 14:30:58 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) [ 971.110591] loop7: detected capacity change from 0 to 40 14:30:58 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 14:30:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:30:58 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 14:30:58 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 971.253835] loop3: detected capacity change from 0 to 40 14:30:58 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) [ 971.323666] loop7: detected capacity change from 0 to 40 14:30:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:30:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:30:58 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) [ 971.450685] loop7: detected capacity change from 0 to 40 [ 971.485931] loop3: detected capacity change from 0 to 40 14:31:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) 14:31:11 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:31:11 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) 14:31:11 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 983.666505] loop3: detected capacity change from 0 to 40 [ 983.694520] loop7: detected capacity change from 0 to 40 14:31:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) 14:31:11 executing program 5: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:11 executing program 5: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 14:31:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:31:24 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 14:31:24 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 997.342670] loop3: detected capacity change from 0 to 40 14:31:24 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:31:24 executing program 6: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:24 executing program 5: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:24 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) 14:31:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 997.387597] loop7: detected capacity change from 0 to 40 14:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 997.458751] loop3: detected capacity change from 0 to 40 14:31:24 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:31:24 executing program 6: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:24 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000008e7b206199f504bd2b2cec9762487c5f2a69520d70537f1db9d3af28498f7c8d9b7884b70eaf82f22ce92f7eb1b2d8ffaf3b06f8daae7f82a4a4fae25cd60fc0623fed7dd5845ca8eb41dddf68e6d6f7930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9883a0dde2d60097db40b9be4b104d4308d35b06f916db6edbfc5f0e5cd06606f2045c845a940fc539d06658ee1f6a6fb66f3b8d8ad46d645727da68fcce2d43d7ae9704109e72823c5e4380c6a29f2dec51458d41055a2931669db6ae5263decbbe94e9ac997e0e7d02c98a235f9a47b55c82a7c73d6baad28a92461163aa3a78f6"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:25 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) [ 997.608750] loop7: detected capacity change from 0 to 40 14:31:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:38 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:38 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) 14:31:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:38 executing program 6: syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:38 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) 14:31:38 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 1) 14:31:38 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:31:38 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) [ 1011.285611] loop7: detected capacity change from 0 to 40 [ 1011.289697] loop3: detected capacity change from 0 to 40 14:31:38 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:38 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:38 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r3}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1011.393926] FAULT_INJECTION: forcing a failure. [ 1011.393926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.393959] CPU: 1 PID: 6906 Comm: syz-executor.1 Not tainted 5.18.0-next-20220602 #1 [ 1011.393980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1011.393994] Call Trace: [ 1011.393999] [ 1011.394006] dump_stack_lvl+0x8b/0xb3 [ 1011.394056] should_fail.cold+0x5/0xa [ 1011.394093] _copy_from_user+0x2a/0x170 [ 1011.394120] io_uring_setup+0x86/0x150 [ 1011.394153] ? lock_is_held_type+0xd7/0x130 [ 1011.394184] ? io_sqe_buffers_register+0x1b0/0x1b0 14:31:38 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) [ 1011.394215] ? vfs_write+0x422/0xac0 [ 1011.394244] ? fput+0x2b/0x190 [ 1011.394276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1011.394305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1011.394341] do_syscall_64+0x3b/0x90 [ 1011.394363] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1011.394389] RIP: 0033:0x7fdfb1ba4b19 [ 1011.394404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:31:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:38 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) [ 1011.394422] RSP: 002b:00007fdfaf11a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1011.394443] RAX: ffffffffffffffda RBX: 00007fdfb1cb7f60 RCX: 00007fdfb1ba4b19 [ 1011.394456] RDX: 0000000020ffe000 RSI: 0000000020000280 RDI: 00000000000002dd 14:31:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1011.394468] RBP: 0000000020000280 R08: 00000000200003c0 R09: 00000000200003c0 [ 1011.394481] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200003c0 [ 1011.394493] R13: 0000000020ffe000 R14: 0000000020000180 R15: 000000002088a000 [ 1011.394528] [ 1011.542003] loop7: detected capacity change from 0 to 40 [ 1011.552199] loop3: detected capacity change from 0 to 40 14:31:39 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:39 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 2) 14:31:51 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 3) 14:31:51 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:51 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) 14:31:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:31:51 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) 14:31:51 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x223, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:31:51 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1024.228511] loop7: detected capacity change from 0 to 40 14:31:51 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) [ 1024.242185] loop3: detected capacity change from 0 to 40 14:31:51 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) 14:31:51 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:31:51 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 4) [ 1024.382820] syz-executor.3: attempt to access beyond end of device [ 1024.382820] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1024.382841] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:32:04 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) 14:32:04 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 5) 14:32:04 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 14:32:04 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:04 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:04 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1037.358643] loop7: detected capacity change from 0 to 40 [ 1037.406112] loop3: detected capacity change from 0 to 40 14:32:04 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 14:32:04 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 6) 14:32:04 executing program 2: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:04 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1037.538432] syz-executor.3: attempt to access beyond end of device [ 1037.538432] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1037.538471] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:32:05 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:05 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 14:32:05 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1037.616783] loop7: detected capacity change from 0 to 40 14:32:05 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:05 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 14:32:05 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 7) 14:32:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:05 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:05 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:05 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) [ 1037.799854] loop3: detected capacity change from 0 to 40 [ 1037.896633] syz-executor.3: attempt to access beyond end of device [ 1037.896633] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1037.896673] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:32:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:20 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:20 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:20 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 8) 14:32:20 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:20 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) 14:32:20 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) [ 1053.206510] loop7: detected capacity change from 0 to 40 14:32:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1053.239131] loop3: detected capacity change from 0 to 40 14:32:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1053.307302] syz-executor.3: attempt to access beyond end of device [ 1053.307302] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1053.307324] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1053.314370] loop7: detected capacity change from 0 to 40 14:32:20 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) [ 1053.345990] FAULT_INJECTION: forcing a failure. [ 1053.345990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.346053] CPU: 0 PID: 7042 Comm: syz-executor.4 Not tainted 5.18.0-next-20220602 #1 [ 1053.346076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1053.346089] Call Trace: [ 1053.346094] [ 1053.346102] dump_stack_lvl+0x8b/0xb3 [ 1053.346149] should_fail.cold+0x5/0xa [ 1053.346185] _copy_to_user+0x2a/0x140 [ 1053.346213] io_uring_setup.cold+0x18c3/0x283d [ 1053.346247] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1053.346299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.346329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.346366] do_syscall_64+0x3b/0x90 [ 1053.346387] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1053.346414] RIP: 0033:0x7f06dc9b2b19 [ 1053.346429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.346448] RSP: 002b:00007f06d9f28108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1053.346469] RAX: ffffffffffffffda RBX: 00007f06dcac5f60 RCX: 00007f06dc9b2b19 [ 1053.346482] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 1053.346494] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 14:32:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1053.346506] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1053.346518] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1053.346554] 14:32:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1053.393368] FAULT_INJECTION: forcing a failure. [ 1053.393368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.393389] CPU: 1 PID: 7048 Comm: syz-executor.0 Not tainted 5.18.0-next-20220602 #1 [ 1053.393402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1053.393411] Call Trace: [ 1053.393414] [ 1053.393419] dump_stack_lvl+0x8b/0xb3 [ 1053.393451] should_fail.cold+0x5/0xa [ 1053.393472] _copy_to_user+0x2a/0x140 [ 1053.393489] io_uring_setup.cold+0x18c3/0x283d [ 1053.393508] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1053.393538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.393574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.393594] do_syscall_64+0x3b/0x90 [ 1053.393606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1053.393622] RIP: 0033:0x7f2f19620b19 [ 1053.393631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.393642] RSP: 002b:00007f2f16b96108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1053.393653] RAX: ffffffffffffffda RBX: 00007f2f19733f60 RCX: 00007f2f19620b19 [ 1053.393661] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff 14:32:20 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:20 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1053.393668] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 1053.393676] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1053.393683] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1053.393702] 14:32:20 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1053.446894] loop7: detected capacity change from 0 to 40 [ 1053.450340] loop3: detected capacity change from 0 to 40 14:32:20 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) [ 1053.527671] socket: no more sockets [ 1053.598149] syz-executor.3: attempt to access beyond end of device [ 1053.598149] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1053.598186] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:32:36 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) 14:32:36 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 9) 14:32:36 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:36 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 14:32:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:36 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:36 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1068.754564] loop3: detected capacity change from 0 to 40 [ 1068.773229] loop7: detected capacity change from 0 to 40 [ 1068.806764] socket: no more sockets [ 1068.893185] syz-executor.3: attempt to access beyond end of device [ 1068.893185] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1068.893219] Buffer I/O error on dev loop3, logical block 10, lost async page write 14:32:51 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) 14:32:51 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:51 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 14:32:51 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 10) 14:32:51 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:51 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1084.524434] loop7: detected capacity change from 0 to 40 [ 1084.545501] loop3: detected capacity change from 0 to 40 [ 1084.568373] socket: no more sockets [ 1084.601756] syz-executor.3: attempt to access beyond end of device [ 1084.601756] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1084.601794] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1084.601906] syz-executor.3: attempt to access beyond end of device [ 1084.601906] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:32:52 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 14:32:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:52 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:32:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:32:52 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:32:52 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1084.760884] loop7: detected capacity change from 0 to 40 14:32:52 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) 14:32:52 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 11) [ 1084.817938] syz-executor.7: attempt to access beyond end of device [ 1084.817938] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1084.818161] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1084.818549] syz-executor.7: attempt to access beyond end of device [ 1084.818549] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1084.839832] loop3: detected capacity change from 0 to 40 [ 1084.896711] syz-executor.3: attempt to access beyond end of device [ 1084.896711] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1084.896748] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1084.896847] syz-executor.3: attempt to access beyond end of device [ 1084.896847] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:32:52 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) 14:32:52 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x7edf, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1084.940236] socket: no more sockets 14:32:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:33:06 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 14:33:06 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:33:06 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:06 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:06 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 12) [ 1099.499830] loop7: detected capacity change from 0 to 40 14:33:06 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) 14:33:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1099.534753] loop3: detected capacity change from 0 to 40 14:33:07 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:07 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1099.608263] syz-executor.3: attempt to access beyond end of device [ 1099.608263] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1099.608302] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1099.608410] syz-executor.3: attempt to access beyond end of device [ 1099.608410] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:33:07 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) 14:33:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:33:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:07 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 14:33:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:33:07 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:07 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 13) [ 1099.730685] loop7: detected capacity change from 0 to 40 [ 1099.768918] loop3: detected capacity change from 0 to 40 14:33:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:33:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:07 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1099.810366] syz-executor.3: attempt to access beyond end of device [ 1099.810366] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1099.810386] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1099.810445] syz-executor.3: attempt to access beyond end of device [ 1099.810445] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:33:07 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1099.852679] loop7: detected capacity change from 0 to 40 14:33:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, 0x0, 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:33:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 1100.007263] loop3: detected capacity change from 0 to 40 [ 1100.047899] syz-executor.3: attempt to access beyond end of device [ 1100.047899] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1100.047934] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1100.049556] syz-executor.3: attempt to access beyond end of device [ 1100.049556] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:33:22 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 28) 14:33:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, 0x0, 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:33:22 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) 14:33:22 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 14) 14:33:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:33:22 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:22 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:22 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1115.411626] loop3: detected capacity change from 0 to 40 [ 1115.465486] loop7: detected capacity change from 0 to 40 [ 1115.487031] syz-executor.3: attempt to access beyond end of device [ 1115.487031] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1115.487062] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1115.487161] syz-executor.3: attempt to access beyond end of device [ 1115.487161] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:33:23 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 29) 14:33:23 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 15) 14:33:23 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:38 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 16) 14:33:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, 0x0, 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:33:38 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 14:33:38 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1130.751767] loop7: detected capacity change from 0 to 40 14:33:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0x0) 14:33:38 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:38 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 30) 14:33:38 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1130.794204] loop3: detected capacity change from 0 to 40 [ 1130.838549] syz-executor.3: attempt to access beyond end of device [ 1130.838549] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1130.838584] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1130.838697] syz-executor.3: attempt to access beyond end of device [ 1130.838697] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 14:33:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0x0) 14:33:38 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 17) 14:33:38 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1130.940894] loop7: detected capacity change from 0 to 40 [ 1147.052699] loop3: detected capacity change from 0 to 40 14:33:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 31) 14:33:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 18) 14:33:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:54 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 28) 14:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:33:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0x0) 14:33:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1147.115872] loop7: detected capacity change from 0 to 40 14:33:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 32) 14:33:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:33:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:33:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 19) [ 1147.267495] loop3: detected capacity change from 0 to 40 14:33:54 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 29) 14:33:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 14:34:08 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:08 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 20) 14:34:08 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:08 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) 14:34:08 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, &(0x7f0000000380)) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:08 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 30) 14:34:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:34:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1160.690639] loop7: detected capacity change from 0 to 40 [ 1160.720758] loop3: detected capacity change from 0 to 40 [ 1160.758679] syz-executor.7: attempt to access beyond end of device [ 1160.758679] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1160.758717] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1160.758813] syz-executor.7: attempt to access beyond end of device [ 1160.758813] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:34:08 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:08 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:08 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 34) 14:34:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:34:08 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1160.871880] FAULT_INJECTION: forcing a failure. [ 1160.871880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.871913] CPU: 1 PID: 7323 Comm: syz-executor.1 Not tainted 5.18.0-next-20220602 #1 [ 1160.871935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1160.871948] Call Trace: [ 1160.871953] [ 1160.871965] dump_stack_lvl+0x8b/0xb3 [ 1160.872009] should_fail.cold+0x5/0xa 14:34:08 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1160.872045] _copy_to_user+0x2a/0x140 [ 1160.872073] io_uring_setup.cold+0x18c3/0x283d [ 1160.872108] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1160.872159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.872189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.872225] do_syscall_64+0x3b/0x90 [ 1160.872247] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1160.872272] RIP: 0033:0x7fdfb1ba4b19 [ 1160.872288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.872306] RSP: 002b:00007fdfaf11a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 14:34:08 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1160.872327] RAX: ffffffffffffffda RBX: 00007fdfb1cb7f60 RCX: 00007fdfb1ba4b19 [ 1160.872340] RDX: 0000000020ffe000 RSI: 0000000020000280 RDI: 00000000000002dd [ 1160.872352] RBP: 0000000020000280 R08: 00000000200003c0 R09: 00000000200003c0 [ 1160.872364] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200003c0 [ 1160.872376] R13: 0000000020ffe000 R14: 0000000020000180 R15: 000000002088a000 [ 1160.872412] [ 1160.939911] loop7: detected capacity change from 0 to 40 [ 1160.970137] loop3: detected capacity change from 0 to 40 [ 1161.018780] syz-executor.7: attempt to access beyond end of device [ 1161.018780] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1161.018801] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:34:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:34:23 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) 14:34:23 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 35) 14:34:23 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 21) 14:34:23 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:23 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:23 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 31) [ 1175.798702] loop7: detected capacity change from 0 to 40 [ 1175.810626] loop3: detected capacity change from 0 to 40 [ 1175.892538] socket: no more sockets 14:34:23 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 36) 14:34:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0x0) 14:34:23 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) 14:34:23 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:23 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 22) 14:34:23 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:23 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 32) [ 1176.044626] loop3: detected capacity change from 0 to 40 [ 1176.090510] loop7: detected capacity change from 0 to 40 [ 1176.142150] syz-executor.7: attempt to access beyond end of device [ 1176.142150] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1176.142184] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1176.142290] syz-executor.7: attempt to access beyond end of device [ 1176.142290] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:34:23 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 37) 14:34:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0x0) 14:34:23 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) [ 1176.352753] loop7: detected capacity change from 0 to 40 14:34:36 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) 14:34:36 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) [ 1189.249880] loop7: detected capacity change from 0 to 40 14:34:36 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:36 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 23) 14:34:36 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 38) 14:34:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0x0) 14:34:36 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1189.283177] loop3: detected capacity change from 0 to 40 14:34:36 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1189.338762] syz-executor.7: attempt to access beyond end of device [ 1189.338762] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1189.338799] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:34:36 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1189.338892] syz-executor.7: attempt to access beyond end of device [ 1189.338892] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1189.392782] socket: no more sockets 14:34:52 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:52 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 24) 14:34:52 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 34) 14:34:52 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) 14:34:52 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 39) 14:34:52 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) 14:34:52 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 40) [ 1205.393376] loop7: detected capacity change from 0 to 40 [ 1205.406830] loop3: detected capacity change from 0 to 40 14:34:52 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) 14:34:52 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 25) 14:34:53 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:34:53 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 41) 14:34:53 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:34:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) 14:34:53 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 35) [ 1205.659831] loop7: detected capacity change from 0 to 40 [ 1205.683285] loop3: detected capacity change from 0 to 40 14:34:53 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1205.724333] syz-executor.7: attempt to access beyond end of device [ 1205.724333] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1205.724366] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1205.724486] syz-executor.7: attempt to access beyond end of device [ 1205.724486] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1205.734335] syz-executor.3: attempt to access beyond end of device [ 1205.734335] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1205.734359] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1205.734431] syz-executor.3: attempt to access beyond end of device [ 1205.734431] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:34:53 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 42) 14:34:53 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 26) 14:35:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:07 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 43) 14:35:07 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 27) 14:35:07 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) 14:35:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) 14:35:07 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:07 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 36) [ 1220.118407] loop3: detected capacity change from 0 to 40 [ 1220.125781] loop7: detected capacity change from 0 to 40 [ 1220.198650] syz-executor.7: attempt to access beyond end of device [ 1220.198650] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1220.198685] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1220.202500] syz-executor.7: attempt to access beyond end of device [ 1220.202500] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:35:07 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:35:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) 14:35:07 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 28) 14:35:07 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 37) 14:35:07 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:07 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:07 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 44) 14:35:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) [ 1220.352137] loop3: detected capacity change from 0 to 40 [ 1220.382066] syz-executor.3: attempt to access beyond end of device [ 1220.382066] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1220.382087] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1220.382148] syz-executor.3: attempt to access beyond end of device [ 1220.382148] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 1220.439637] loop7: detected capacity change from 0 to 40 [ 1220.465612] syz-executor.7: attempt to access beyond end of device [ 1220.465612] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1220.465631] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1220.465683] syz-executor.7: attempt to access beyond end of device [ 1220.465683] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:35:20 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:20 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:35:20 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 29) 14:35:20 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1232.959454] loop3: detected capacity change from 0 to 40 14:35:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) 14:35:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) 14:35:20 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 45) [ 1232.975215] loop7: detected capacity change from 0 to 40 14:35:20 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 38) [ 1233.006009] syz-executor.7: attempt to access beyond end of device [ 1233.006009] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1233.006029] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1233.006087] syz-executor.7: attempt to access beyond end of device [ 1233.006087] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:35:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 14:35:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) 14:35:20 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:20 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1233.106087] loop3: detected capacity change from 0 to 40 [ 1233.107432] loop7: detected capacity change from 0 to 40 14:35:20 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 46) [ 1233.136569] syz-executor.7: attempt to access beyond end of device [ 1233.136569] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1233.136588] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1233.136642] syz-executor.7: attempt to access beyond end of device [ 1233.136642] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1233.142032] syz-executor.3: attempt to access beyond end of device [ 1233.142032] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1233.142050] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1233.142107] syz-executor.3: attempt to access beyond end of device [ 1233.142107] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:35:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) [ 1233.251468] loop3: detected capacity change from 0 to 40 [ 1233.265574] syz-executor.3: attempt to access beyond end of device [ 1233.265574] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1233.265593] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1233.265652] syz-executor.3: attempt to access beyond end of device [ 1233.265652] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 [ 1244.990012] loop7: detected capacity change from 0 to 40 14:35:32 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 47) 14:35:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 14:35:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) 14:35:32 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:32 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) 14:35:32 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 39) 14:35:32 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 30) 14:35:32 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1245.031633] loop3: detected capacity change from 0 to 40 [ 1245.037023] syz-executor.7: attempt to access beyond end of device [ 1245.037023] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1245.037043] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1245.037098] syz-executor.7: attempt to access beyond end of device [ 1245.037098] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:35:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 14:35:32 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1245.109840] syz-executor.3: attempt to access beyond end of device [ 1245.109840] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1245.109879] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1245.114538] syz-executor.3: attempt to access beyond end of device [ 1245.114538] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:35:32 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 40) [ 1245.151798] loop7: detected capacity change from 0 to 40 14:35:32 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 31) 14:35:32 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 48) 14:35:32 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) 14:35:32 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:35:32 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1245.243721] syz-executor.7: attempt to access beyond end of device [ 1245.243721] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1245.243757] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1245.243864] syz-executor.7: attempt to access beyond end of device [ 1245.243864] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1245.282852] loop3: detected capacity change from 0 to 40 [ 1245.304728] syz-executor.3: attempt to access beyond end of device [ 1245.304728] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1245.304746] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1245.304801] syz-executor.3: attempt to access beyond end of device [ 1245.304801] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:35:47 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 41) 14:35:47 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 32) 14:35:47 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) 14:35:47 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:47 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:35:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 14:35:47 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 49) 14:35:47 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 50) [ 1260.220420] loop3: detected capacity change from 0 to 40 [ 1260.236845] loop7: detected capacity change from 0 to 40 [ 1260.286835] syz-executor.7: attempt to access beyond end of device [ 1260.286835] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1260.286875] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1260.292329] syz-executor.7: attempt to access beyond end of device [ 1260.292329] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1260.295658] syz-executor.3: attempt to access beyond end of device [ 1260.295658] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1260.295692] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1260.295807] syz-executor.3: attempt to access beyond end of device [ 1260.295807] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:35:47 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 51) 14:35:47 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 33) 14:35:47 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 42) 14:35:47 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:35:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) 14:35:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 14:35:47 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:35:47 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 1260.466186] loop7: detected capacity change from 0 to 40 [ 1260.499311] syz-executor.7: attempt to access beyond end of device [ 1260.499311] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1260.499330] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1260.499386] syz-executor.7: attempt to access beyond end of device [ 1260.499386] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1260.565797] loop3: detected capacity change from 0 to 40 [ 1260.617124] syz-executor.3: attempt to access beyond end of device [ 1260.617124] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1260.617163] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1260.617276] syz-executor.3: attempt to access beyond end of device [ 1260.617276] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 14:36:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) 14:36:01 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 52) [ 1273.764939] loop3: detected capacity change from 0 to 40 [ 1273.771824] loop7: detected capacity change from 0 to 40 14:36:01 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:36:01 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 43) 14:36:01 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 34) 14:36:01 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:36:01 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe824, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1273.796515] syz-executor.7: attempt to access beyond end of device [ 1273.796515] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1273.796533] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1273.796598] syz-executor.7: attempt to access beyond end of device [ 1273.796598] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1273.798315] syz-executor.3: attempt to access beyond end of device [ 1273.798315] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1273.798350] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1273.798416] syz-executor.3: attempt to access beyond end of device [ 1273.798416] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) 14:36:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) 14:36:01 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:36:01 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 53) [ 1273.910047] loop3: detected capacity change from 0 to 40 [ 1273.930453] loop7: detected capacity change from 0 to 40 [ 1273.934778] syz-executor.3: attempt to access beyond end of device [ 1273.934778] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1273.934796] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1273.934853] syz-executor.3: attempt to access beyond end of device [ 1273.934853] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:01 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 44) [ 1273.969283] syz-executor.7: attempt to access beyond end of device [ 1273.969283] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1273.969302] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1273.969360] syz-executor.7: attempt to access beyond end of device [ 1273.969360] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:36:01 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 1) 14:36:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 14:36:01 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1274.125705] FAULT_INJECTION: forcing a failure. [ 1274.125705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.125741] CPU: 1 PID: 7682 Comm: syz-executor.6 Not tainted 5.18.0-next-20220602 #1 [ 1274.125765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1274.125780] Call Trace: [ 1274.125786] [ 1274.125794] dump_stack_lvl+0x8b/0xb3 [ 1274.125842] should_fail.cold+0x5/0xa [ 1274.125883] _copy_from_user+0x2a/0x170 [ 1274.125913] io_uring_setup+0x86/0x150 [ 1274.125958] ? lock_is_held_type+0xd7/0x130 [ 1274.125993] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1274.126028] ? vfs_write+0x422/0xac0 [ 1274.126061] ? fput+0x2b/0x190 [ 1274.126099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.126136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.126176] do_syscall_64+0x3b/0x90 [ 1274.126200] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1274.126230] RIP: 0033:0x7fc7e8ca8b19 [ 1274.126247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.126268] RSP: 002b:00007fc7e621e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1274.126291] RAX: ffffffffffffffda RBX: 00007fc7e8dbbf60 RCX: 00007fc7e8ca8b19 [ 1274.126306] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 1274.126320] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 1274.126334] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1274.126347] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1274.126388] 14:36:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) 14:36:16 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) 14:36:16 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:36:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:36:16 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 54) 14:36:16 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 35) 14:36:16 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 45) 14:36:16 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) [ 1288.936957] loop7: detected capacity change from 0 to 40 14:36:16 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, 0x0, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1288.973467] loop3: detected capacity change from 0 to 40 [ 1288.978995] syz-executor.7: attempt to access beyond end of device [ 1288.978995] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1288.979013] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1288.979066] syz-executor.7: attempt to access beyond end of device [ 1288.979066] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1289.012814] syz-executor.3: attempt to access beyond end of device [ 1289.012814] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1289.012835] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1289.012903] syz-executor.3: attempt to access beyond end of device [ 1289.012903] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 14:36:16 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 55) 14:36:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x505140, 0x41) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1289.093628] loop7: detected capacity change from 0 to 40 [ 1289.128128] loop3: detected capacity change from 0 to 40 [ 1289.131599] syz-executor.7: attempt to access beyond end of device [ 1289.131599] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1289.131617] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1289.131671] syz-executor.7: attempt to access beyond end of device [ 1289.131671] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1289.172899] syz-executor.3: attempt to access beyond end of device [ 1289.172899] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1289.172934] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1289.172997] syz-executor.3: attempt to access beyond end of device [ 1289.172997] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:31 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 36) 14:36:31 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:36:31 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) 14:36:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) 14:36:31 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 56) 14:36:31 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 46) 14:36:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat(r1, &(0x7f0000000180)='./file1\x00', 0x8080, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r11 = signalfd4(r10, &(0x7f0000000200)={[0x80000000]}, 0x8, 0x80000) r12 = clone3(&(0x7f0000000280)={0x133323100, &(0x7f00000000c0), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$cgroup_pid(r11, &(0x7f0000000000)=r12, 0x12) kcmp$KCMP_EPOLL_TFD(r12, 0x0, 0x7, r9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYBLOB="52b7ecf97bf87f5aadf8bbf519e737d13123e3590bf5f8331cdc3270f217b614b14f9546245b2496349f9b1bf12537082006bbea34d33cafaf6a5288aa41f4ec8d0243de54ae85b126848b91dba51648cbb1d8650de1cc5b54e1ddfbc11bd3a129125f098b62b3206e5da94a0a1c7fb30838b03e1f1a8eed3c94478834e3468e17b97e8c91", @ANYRESHEX=r7], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(r0, r5, &(0x7f0000000240)=0x400, 0x100) 14:36:31 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) [ 1303.840466] loop3: detected capacity change from 0 to 40 14:36:31 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000140)) [ 1303.882580] loop7: detected capacity change from 0 to 40 14:36:31 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 57) [ 1303.916748] syz-executor.3: attempt to access beyond end of device [ 1303.916748] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1303.916769] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 1303.916828] syz-executor.3: attempt to access beyond end of device [ 1303.916828] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40 14:36:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) 14:36:31 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1303.961811] syz-executor.7: attempt to access beyond end of device [ 1303.961811] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1303.961848] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1303.964116] syz-executor.7: attempt to access beyond end of device [ 1303.964116] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:36:31 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:36:31 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) 14:36:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) 14:36:31 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 58) [ 1304.151601] loop7: detected capacity change from 0 to 40 14:36:31 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 37) 14:36:31 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:36:31 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 47) [ 1304.247752] syz-executor.7: attempt to access beyond end of device [ 1304.247752] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1304.247866] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1304.254118] syz-executor.7: attempt to access beyond end of device [ 1304.254118] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:36:49 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 48) 14:36:49 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:36:49 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 59) 14:36:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) 14:36:49 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) 14:36:49 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 38) 14:36:49 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) r0 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 14:36:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) r2 = accept$unix(r1, 0x0, &(0x7f0000000040)) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)=@sha1={0x1, "2206a2c50b73c9c3a56b91db5156638177fce7c8"}, 0x15, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file0\x00'}) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) close(r5) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1321.971703] loop7: detected capacity change from 0 to 40 [ 1322.026349] syz-executor.7: attempt to access beyond end of device [ 1322.026349] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1322.026377] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1322.026453] syz-executor.7: attempt to access beyond end of device [ 1322.026453] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:36:49 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 60) 14:36:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 14:36:49 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 39) 14:36:49 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 49) 14:36:49 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) [ 1322.227057] loop7: detected capacity change from 0 to 40 14:36:49 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) 14:36:49 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) 14:36:49 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 61) [ 1322.319710] syz-executor.7: attempt to access beyond end of device [ 1322.319710] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1322.319734] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1322.319798] syz-executor.7: attempt to access beyond end of device [ 1322.319798] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:36:49 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 40) 14:36:49 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 62) 14:37:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) 14:37:04 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:37:04 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 14:37:04 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 50) 14:37:04 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 41) 14:37:04 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 63) 14:37:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r3, r2, 0x0, 0xfffffdef) 14:37:04 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) [ 1337.059818] loop7: detected capacity change from 0 to 40 14:37:04 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 64) 14:37:04 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 51) [ 1337.129397] syz-executor.7: attempt to access beyond end of device [ 1337.129397] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1337.129460] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1337.129611] syz-executor.7: attempt to access beyond end of device [ 1337.129611] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:37:04 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 42) 14:37:04 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) 14:37:27 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 43) 14:37:27 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:37:27 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) 14:37:27 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 65) 14:37:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24) 14:37:27 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 1) 14:37:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1d6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x1f0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x10000eb3, &(0x7f0000000200)={0x0, 0x7fffc}, &(0x7f000099b000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_setup(0x2362, &(0x7f0000000040)={0x0, 0x2f11, 0x2, 0x2, 0xfe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r9}}, 0x81) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd_index=0x1, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000240)="1d7fecf4b474f2aa0744c5d9bf316ed9c5d5711c4b601bfa085c5819ab213f0adc0bd3bc17657c42cfd2c9873a27191c97bba0ea3aa76c15a6ee1caf5ca901ecbd88980c706b0f973e8243b1798858e8b7ed1138ec178c86950b948a4c9fe00f915966f4b3c6b75df5b99b15a60c66f1fa259e753cbd4c1361c0a3e6648b51a061a9537589c332ea63a52657b6a10ef414063aef1749722766a8df61e90a18e25f16f594eba4edfa60c17740be1e947463bac72995ed6152c220", 0xba}], 0x1, 0x0, 0x1, {0x0, r9}}, 0x8) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) sendfile(r2, r1, 0x0, 0xfffffdef) 14:37:27 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 52) [ 1360.235122] loop7: detected capacity change from 0 to 40 [ 1360.299528] FAULT_INJECTION: forcing a failure. [ 1360.299528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.299559] CPU: 1 PID: 7855 Comm: syz-executor.5 Not tainted 5.18.0-next-20220602 #1 [ 1360.299581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1360.299593] Call Trace: [ 1360.299599] [ 1360.299606] dump_stack_lvl+0x8b/0xb3 [ 1360.299648] should_fail.cold+0x5/0xa [ 1360.299684] _copy_from_user+0x2a/0x170 [ 1360.299714] io_uring_setup+0x86/0x150 [ 1360.299748] ? lock_is_held_type+0xd7/0x130 [ 1360.299785] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1360.299816] ? vfs_write+0x422/0xac0 [ 1360.299845] ? fput+0x2b/0x190 [ 1360.299877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.299906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.299943] do_syscall_64+0x3b/0x90 [ 1360.299964] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1360.299990] RIP: 0033:0x7f2026c0bb19 [ 1360.300005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.300024] RSP: 002b:00007f2024181108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1360.300044] RAX: ffffffffffffffda RBX: 00007f2026d1ef60 RCX: 00007f2026c0bb19 [ 1360.300057] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff 14:37:27 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 66) [ 1360.300070] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 1360.300082] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1360.300094] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1360.300130] [ 1360.303148] syz-executor.7: attempt to access beyond end of device [ 1360.303148] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1360.303179] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1360.303278] syz-executor.7: attempt to access beyond end of device [ 1360.303278] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:37:27 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 53) 14:37:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25) 14:37:27 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 14:37:27 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 14:37:27 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) 14:37:27 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 44) 14:37:27 executing program 3: syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="601c6d6b64060066d8a02b00080101004000206bf801", 0x16}, {0x0, 0x0, 0x2800}], 0x80080, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYBLOB="1fd0fc2b6e", @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) read(r7, &(0x7f0000000040)=""/117, 0x75) [ 1360.527118] loop7: detected capacity change from 0 to 40 [ 1360.582302] syz-executor.7: attempt to access beyond end of device [ 1360.582302] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1360.582335] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1360.582463] syz-executor.7: attempt to access beyond end of device [ 1360.582463] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:37:28 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 67) 14:37:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26) 14:37:28 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) 14:37:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:37:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9cde, 0x40) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0xc2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) 14:37:43 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 45) 14:37:43 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:37:43 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) 14:37:43 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 68) 14:37:43 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 54) 14:37:43 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) [ 1376.464720] loop7: detected capacity change from 0 to 40 14:37:43 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 69) 14:37:43 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) [ 1376.541069] syz-executor.7: attempt to access beyond end of device [ 1376.541069] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1376.541104] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1376.541199] syz-executor.7: attempt to access beyond end of device [ 1376.541199] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:37:44 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:37:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r2, 0x0) sendto$unix(r2, &(0x7f0000000040)="714b799af1138dea480e073a61121df2dc8473a77f8bebeed5970ba3f072e45bb54b7b6d2fce97af0cbcfe84b64821546ffce4bd26615fce53dcfec151740f486f79196cdfc4f7ebfa396f4114da8c2dcda9b90d5915", 0x56, 0x1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:37:44 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r2, r1, 0x0, 0xfffffdef) 14:37:44 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) 14:37:44 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 55) 14:37:44 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 46) 14:37:44 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) [ 1376.758653] loop7: detected capacity change from 0 to 40 [ 1376.801530] syz-executor.7: attempt to access beyond end of device [ 1376.801530] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1376.801563] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1376.804834] syz-executor.7: attempt to access beyond end of device [ 1376.804834] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1376.822609] syz-executor.7: attempt to access beyond end of device [ 1376.822609] loop7: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 1376.822638] Buffer I/O error on dev loop7, logical block 12, lost async page write [ 1376.822736] syz-executor.7: attempt to access beyond end of device [ 1376.822736] loop7: rw=2049, sector=52, nr_sectors = 8 limit=40 [ 1390.371826] loop7: detected capacity change from 0 to 40 14:37:57 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 70) 14:37:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) 14:37:57 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 47) 14:37:57 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), 0x0) 14:37:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x80) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 14:37:57 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) 14:37:57 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 56) 14:37:57 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) 14:37:57 executing program 7: r0 = syz_io_uring_setup(0xffffffff, &(0x7f0000000080)={0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES16=r0]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r5, r4, 0x0, 0xfffffdef) [ 1390.597286] loop7: detected capacity change from 0 to 40 [ 1390.619800] FAT-fs (loop7): Unrecognized mount option "0000000000000000000401777777777777777777777ÿÿ" or missing value [ 1391.405674] loop7: detected capacity change from 0 to 40 [ 1391.423745] FAT-fs (loop7): Unrecognized mount option "0000000000000000000401777777777777777777777ÿÿ" or missing value 14:38:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) 14:38:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="001c6d6b646f7366d8a02b00080101000440002000f8010d1877d7999e85220aeafbdd0266fa504796e718ac5e3f6304000000ff6020ece8fa01d1f8c085c390b77844f48575b5348cebb4b937546c9aaa87bddf45f809dccb24a9998fcb", 0x5e}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x100) 14:38:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:38:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) 14:38:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 48) 14:38:11 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 1) 14:38:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 71) 14:38:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 57) [ 1403.868416] loop7: detected capacity change from 0 to 40 [ 1403.883825] FAT-fs (loop7): count of clusters too big (3408894) [ 1403.883839] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1403.940738] FAULT_INJECTION: forcing a failure. [ 1403.940738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.940772] CPU: 0 PID: 8000 Comm: syz-executor.2 Not tainted 5.18.0-next-20220602 #1 [ 1403.940803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1403.940823] Call Trace: [ 1403.940830] [ 1403.940840] dump_stack_lvl+0x8b/0xb3 [ 1403.940902] should_fail.cold+0x5/0xa [ 1403.940955] _copy_from_user+0x2a/0x170 [ 1403.940995] io_uring_setup+0x86/0x150 [ 1403.941046] ? lock_is_held_type+0xd7/0x130 [ 1403.941092] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1403.941142] ? vfs_write+0x422/0xac0 [ 1403.941185] ? fput+0x2b/0x190 [ 1403.941232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.941278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.941331] do_syscall_64+0x3b/0x90 [ 1403.941365] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1403.941384] RIP: 0033:0x7f74e6c84b19 [ 1403.941392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:38:11 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 2) 14:38:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 72) [ 1403.941403] RSP: 002b:00007f74e41fa108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1403.941415] RAX: ffffffffffffffda RBX: 00007f74e6d97f60 RCX: 00007f74e6c84b19 [ 1403.941422] RDX: 0000000020ffe000 RSI: 0000000020000280 RDI: 00000000000002dd [ 1403.941429] RBP: 0000000020000280 R08: 00000000200003c0 R09: 00000000200003c0 [ 1403.941436] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200003c0 [ 1403.941443] R13: 0000000020ffe000 R14: 0000000020000180 R15: 000000002088a000 [ 1403.941463] 14:38:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 58) 14:38:11 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 3) 14:38:11 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 14:38:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 14:38:11 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 4) 14:38:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 73) 14:38:11 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 49) 14:38:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) [ 1404.733025] loop7: detected capacity change from 0 to 40 [ 1404.742420] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value 14:38:24 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 5) 14:38:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0xdf0, 0xfffffffffffffffb, 0x7}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:38:24 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 59) 14:38:24 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 14:38:24 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 50) 14:38:24 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 74) 14:38:24 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) 14:38:24 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000040)="88d21f61bcb63da0376e6bff78295e89ee35b6cea91946dc314d89a2b0fc9a2b65a057d1b82fff1d4ccfefa11c31e3f2cc932caee8943b17b8ac8acf4adb8aa902fc8298a0f4df8b74272dee8d5de5aa759220ee86054f0da5b8ad164aa149904e11c0ea7e7a3ad83b34a01c618f6b60ccf238448a51c18d8b0327fd91918388a7b7dc69dbe3199bf0aeda6f56a338fddf294a083bde44dccfa2a51075389a", 0x9f, 0x6}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x208000, 0x88) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1417.134861] loop7: detected capacity change from 0 to 40 [ 1417.177223] FAT-fs (loop7): invalid media value (0x89) [ 1417.177250] FAT-fs (loop7): Can't find a valid FAT filesystem 14:38:24 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 6) 14:38:24 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 75) 14:38:24 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 51) 14:38:24 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) 14:38:24 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 60) 14:38:24 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 14:38:25 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 7) 14:38:25 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 52) [ 1417.973767] loop7: detected capacity change from 0 to 40 [ 1417.985396] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value 14:38:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 76) 14:38:41 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) 14:38:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 61) 14:38:41 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 53) 14:38:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) 14:38:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 8) 14:38:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r3, 0x3, 0x0, 0x3) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="b91f83942c7766646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,msize=0x00000000000001ff,debug=0x0000000000000005,nodevmap,afid=0x0000000000000002,access=', @ANYRESDEC=0x0, @ANYRESDEC]) sendfile(r2, r1, 0x0, 0xfffffdef) 14:38:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000005c0)="5fc59b434463e0ae8442647815063db38330a24224b4d84dbe36f43b59e3cb05dc3b0da20f17d7cc4b081f36e6e39a7bc7f361e046ed704b1a783c27fc97899f4e0c149664564b35cebd1ea9bdf76a7a995973f347da0967f5ecf973231911ed850532236af3e2f2c608fca8bb8c3ef50e29052800286161d99342726ea6b5dc3e09ae35ad547a3be8d2ccdf195e6333a598502785e5b737a8f5c47a3e093fb80927936e67243cceb5d0ffee7cc6df4ab56d32c44be74934de78a2e6af4a8b008cb397983f362ce0f4256dcab7b372e1b561139ffd0e3ad65c53c0efc17cca3cf4c34b6ef16dad", 0xe7, 0x20) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8011) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r4, 0x3, 0x0, 0x3) fcntl$setflags(r1, 0x2, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0xbc, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9bd6365c8074e5fe1984c327cd05d691fb345b7a5a594e86bfd1"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ce8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x30000811}, 0x40) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1ac, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x35c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff001}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "97dfbef294411622455e72558e4240b92f8dcb9b84ff58e196b3e27c4433d7e2b5803402cc8cb582336b82236a9884876d7f7c59abfd122c3030175e55e8b94575813a7ab3ce3737f1745072814f3c"}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10) [ 1433.994988] loop7: detected capacity change from 0 to 40 [ 1434.046408] syz-executor.7: attempt to access beyond end of device [ 1434.046408] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1434.046443] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1434.046543] syz-executor.7: attempt to access beyond end of device [ 1434.046543] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1434.095924] FAULT_INJECTION: forcing a failure. [ 1434.095924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.095950] CPU: 1 PID: 8093 Comm: syz-executor.6 Not tainted 5.18.0-next-20220602 #1 [ 1434.095966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1434.095977] Call Trace: [ 1434.095981] [ 1434.095987] dump_stack_lvl+0x8b/0xb3 [ 1434.096021] should_fail.cold+0x5/0xa [ 1434.096048] _copy_to_user+0x2a/0x140 [ 1434.096069] io_uring_setup.cold+0x18c3/0x283d [ 1434.096096] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1434.096135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1434.096158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1434.096186] do_syscall_64+0x3b/0x90 [ 1434.096202] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1434.096221] RIP: 0033:0x7fc7e8ca8b19 [ 1434.096233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:38:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 77) [ 1434.096247] RSP: 002b:00007fc7e621e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1434.096262] RAX: ffffffffffffffda RBX: 00007fc7e8dbbf60 RCX: 00007fc7e8ca8b19 [ 1434.096272] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 1434.096281] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 14:38:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) 14:38:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 62) 14:38:41 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 54) [ 1434.096291] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1434.096300] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1434.096327] 14:38:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 9) [ 1434.264854] socket: no more sockets 14:38:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 14:38:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) 14:38:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 10) 14:38:54 executing program 3: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x29}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x5, 0x0, 0x8}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xa}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:38:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) 14:38:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 55) 14:38:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 78) 14:38:54 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x4080, 0x5a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x1000, 0x20000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 14:38:54 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 63) [ 1447.368556] loop7: detected capacity change from 0 to 40 [ 1447.378489] socket: no more sockets 14:38:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 11) 14:38:54 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 14:38:54 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) 14:38:54 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 56) 14:38:54 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 79) 14:38:54 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 64) 14:38:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:38:55 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 80) 14:38:55 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 12) 14:38:55 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) [ 1447.885242] loop7: detected capacity change from 0 to 40 [ 1447.914240] syz-executor.7: attempt to access beyond end of device [ 1447.914240] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1447.914261] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1447.914319] syz-executor.7: attempt to access beyond end of device [ 1447.914319] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1447.933209] syz-executor.7: attempt to access beyond end of device [ 1447.933209] loop7: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 1447.933233] Buffer I/O error on dev loop7, logical block 12, lost async page write [ 1447.933291] syz-executor.7: attempt to access beyond end of device [ 1447.933291] loop7: rw=2049, sector=52, nr_sectors = 8 limit=40 14:39:11 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) 14:39:11 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) r1 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1f) 14:39:11 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 65) 14:39:11 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 13) 14:39:12 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 81) 14:39:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x111000, 0x13) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:39:12 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) 14:39:12 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 57) 14:39:12 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 14) 14:39:12 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 82) 14:39:12 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 14:39:12 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) 14:39:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000180)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r2, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x80, 0x68) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:39:12 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 58) 14:39:12 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 66) 14:39:12 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 15) [ 1464.950803] loop7: detected capacity change from 0 to 40 14:39:12 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 28) 14:39:12 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 83) 14:39:12 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 59) 14:39:12 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) 14:39:12 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 84) 14:39:13 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 29) 14:39:13 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 16) 14:39:13 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 67) 14:39:13 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 85) 14:39:13 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 60) 14:39:13 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 14:39:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x193) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x971) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX=r9, @ANYRES16=r2, @ANYRES64=r9, @ANYBLOB="cc73347353ea7469475b71e7e7b3d63b98b4006f50fc8de83f88d0ec2da1d3bf938a4600458787eeaa84d88584f393a32096670364ffada6a3a52a08b79c68e9534a62b4eb01b011f6d692959a5789af07e04bf4d910"], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:39:26 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 17) 14:39:26 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 86) 14:39:26 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 61) 14:39:26 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 14:39:26 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 68) 14:39:26 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 30) 14:39:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r2, 0x3, 0x0, 0x3) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x541042, 0x0) fallocate(r3, 0x3, 0x0, 0x3) openat(r3, &(0x7f0000000040)='./file0\x00', 0x404000, 0x1bf) sendfile(r1, r0, 0x0, 0xfffffdef) 14:39:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x40) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000380)=@in={0x2, 0x4e22, @multicast2}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@fowner_gt}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x5, 0x34, 0x0, 0x61, 0x37, 0x61, 0x63, 0x34], 0x2d, [0x36, 0x64, 0x65, 0x37], 0x2d, [0x30, 0x36, 0x62, 0x35], 0x2d, [0x0, 0x36, 0x65, 0x37], 0x2d, [0x39, 0x67, 0x37, 0x33, 0x62, 0x30, 0x61, 0x36]}}}, {@fsmagic={'fsmagic', 0x3d, 0x80}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_measure}, {@obj_role}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@appraise}]}}) lchown(&(0x7f0000000800)='./file1\x00', 0x0, 0xee00) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, @sco, @qipcrtr={0x2a, 0x4, 0x7ffe}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)='netdevsim0\x00', 0x58d9, 0x26a4, 0x404}) linkat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/exec\x00') [ 1479.571650] loop7: detected capacity change from 0 to 40 14:39:27 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 62) 14:39:27 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 87) 14:39:27 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 88) 14:39:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 18) 14:39:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 31) 14:39:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x90) 14:39:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 89) 14:39:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc040, 0x102) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 14:39:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 69) 14:39:41 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 63) 14:39:41 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) [ 1493.875062] loop7: detected capacity change from 0 to 40 14:39:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 32) 14:39:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x58, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b89e804bb9d646f7366d8a02b00080101000440d848e71b762530ead39e499c0d1074552c37636b06b55e6ae9f172eb6168622c1d5d5c303faec4f23fe807352eb5e0bbb1e47404505daa10c889d46e1bad9b08035dd946aa7acc4b484183e856ba75e19a0ef21ffc806cf5481cf0", 0x72}, {0x0, 0x0, 0x2800}], 0x4, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file1\x00', r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1508.309028] loop7: detected capacity change from 0 to 40 14:39:55 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 90) 14:39:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r0, 0x3, 0x0, 0x3) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x280001, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdef) 14:39:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r0, 0x3, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0\x00']) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setgroups(0x6, &(0x7f0000000300)=[r5, 0x0, 0xffffffffffffffff, r5, r5, r5]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setgroups(0x6, &(0x7f0000000300)=[r7, 0x0, 0xffffffffffffffff, r7, r7, r7]) sendmsg$netlink(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x80, 0x4000}, 0x8000) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, r5, 0x100) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r9, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r9, r8, 0x0, 0xfffffdef) 14:39:55 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 19) 14:39:55 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) 14:39:55 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 64) 14:39:55 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) 14:39:55 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 70) [ 1508.360344] FAULT_INJECTION: forcing a failure. [ 1508.360344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.360365] CPU: 0 PID: 8319 Comm: syz-executor.5 Not tainted 5.18.0-next-20220602 #1 [ 1508.360377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1508.360385] Call Trace: [ 1508.360388] [ 1508.360393] dump_stack_lvl+0x8b/0xb3 [ 1508.360419] should_fail.cold+0x5/0xa [ 1508.360439] _copy_to_user+0x2a/0x140 [ 1508.360455] io_uring_setup.cold+0x18c3/0x283d [ 1508.360474] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1508.360504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1508.360521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1508.360540] do_syscall_64+0x3b/0x90 [ 1508.360552] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1508.360567] RIP: 0033:0x7f2026c0bb19 [ 1508.360576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1508.360587] RSP: 002b:00007f2024181108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1508.360598] RAX: ffffffffffffffda RBX: 00007f2026d1ef60 RCX: 00007f2026c0bb19 [ 1508.360605] RDX: 0000000020fff000 RSI: 00000000200001c0 RDI: 00000000ffffffff [ 1508.360612] RBP: 00000000200001c0 R08: 0000000020000140 R09: 0000000020000140 [ 1508.360618] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 1508.360625] R13: 0000000020fff000 R14: 0000000020000100 R15: 0000000020ffd000 [ 1508.360644] [ 1508.384187] syz-executor.7: attempt to access beyond end of device [ 1508.384187] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 14:39:55 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 34) 14:39:55 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 65) [ 1508.384209] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:39:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c616b646f7366d8a02b000801002000f8010000000063b74fe1b7d2e6afa32658ed5c003ddffce25317420210ba59b522625dc2ba6711d02838d9987a8bb9e0c6eea7ffbbb558be1f659e5223f7d56ed2a7bd77fc86baaab3924fef934e3e318ce2a6e30d5126dcea0760c2d9c6c7f13c6f19dc", 0x75}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x123003, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/237) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) [ 1508.384271] syz-executor.7: attempt to access beyond end of device [ 1508.384271] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:39:55 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 66) 14:39:55 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 20) 14:39:55 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 71) 14:39:55 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 91) 14:39:55 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) [ 1508.611093] loop7: detected capacity change from 0 to 40 [ 1508.645368] FAT-fs (loop7): bogus number of FAT structure [ 1508.645420] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1508.668660] loop7: detected capacity change from 0 to 40 [ 1508.691167] FAULT_INJECTION: forcing a failure. [ 1508.691167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.691196] CPU: 0 PID: 8338 Comm: syz-executor.2 Not tainted 5.18.0-next-20220602 #1 [ 1508.691219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1508.691233] Call Trace: [ 1508.691238] [ 1508.691246] dump_stack_lvl+0x8b/0xb3 [ 1508.691290] should_fail.cold+0x5/0xa [ 1508.691327] _copy_to_user+0x2a/0x140 [ 1508.691355] io_uring_setup.cold+0x18c3/0x283d [ 1508.691388] ? clockevents_program_event+0x131/0x350 [ 1508.691414] ? io_sqe_buffers_register+0x1b0/0x1b0 [ 1508.691467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1508.691498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1508.691536] do_syscall_64+0x3b/0x90 [ 1508.691558] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1508.691586] RIP: 0033:0x7f74e6c84b19 [ 1508.691602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1508.691621] RSP: 002b:00007f74e41fa108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1508.691642] RAX: ffffffffffffffda RBX: 00007f74e6d97f60 RCX: 00007f74e6c84b19 [ 1508.691656] RDX: 0000000020ffe000 RSI: 0000000020000280 RDI: 00000000000002dd [ 1508.691668] RBP: 0000000020000280 R08: 00000000200003c0 R09: 00000000200003c0 [ 1508.691681] R10: 0000000020000180 R11: 0000000000000202 R12: 00000000200003c0 [ 1508.691694] R13: 0000000020ffe000 R14: 0000000020000180 R15: 000000002088a000 [ 1508.691730] [ 1508.705971] FAT-fs (loop7): bogus number of FAT structure [ 1508.705992] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1508.744098] socket: no more sockets 14:40:09 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 67) 14:40:09 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 92) 14:40:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301002, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r2, 0x3, 0x0, 0x3) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x301000, 0x114) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xff}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x81}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x24000004) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r1, r0, 0x0, 0xfffffdef) 14:40:09 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 72) 14:40:09 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 21) 14:40:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r0, 0x3, 0x0, 0x3) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0xd1, "8bdb07", 0x80, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'ip6tnl0\x00', {}, 0x3}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x10840, 0x13) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1522.483498] loop7: detected capacity change from 0 to 40 14:40:09 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 14:40:09 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 35) [ 1522.522244] syz-executor.7: attempt to access beyond end of device [ 1522.522244] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1522.522263] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1522.522315] syz-executor.7: attempt to access beyond end of device [ 1522.522315] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1522.558526] socket: no more sockets 14:40:10 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x800) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}, 0x0) sendfile(r7, r4, 0x0, 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r8, 0x3, 0x0, 0x3) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x6, 'memory'}, {0x2b, 'rlimit'}, {0xddaabfc58bc36fc6, 'freezer'}, {0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0x24) 14:40:10 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 93) 14:40:10 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 73) [ 1522.622292] loop7: detected capacity change from 0 to 40 14:40:10 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 22) 14:40:10 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 68) 14:40:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x8000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x149242, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x53}) openat(r0, &(0x7f0000000280)='./file0\x00', 0x10000, 0x42) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x0, 0x101, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x1, 0x8000, 0x3f]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xeb}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0x60}}, 0x40080) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r1, 0x0, 0xfffffdf0) 14:40:10 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 36) 14:40:10 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 74) 14:40:10 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) 14:40:10 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 94) 14:40:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fallocate(r2, 0x3, 0x0, 0x3) openat(r2, &(0x7f0000000040)='./file1\x00', 0x4800, 0xe0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1522.890235] loop7: detected capacity change from 0 to 40 14:40:10 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 69) 14:40:10 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 37) [ 1522.937800] socket: no more sockets [ 1523.012255] syz-executor.7: attempt to access beyond end of device [ 1523.012255] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1523.012326] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1523.012536] syz-executor.7: attempt to access beyond end of device [ 1523.012536] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1523.047154] syz-executor.7: attempt to access beyond end of device [ 1523.047154] loop7: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 1523.047186] Buffer I/O error on dev loop7, logical block 12, lost async page write [ 1523.047290] syz-executor.7: attempt to access beyond end of device [ 1523.047290] loop7: rw=2049, sector=52, nr_sectors = 8 limit=40 14:40:24 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 23) 14:40:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x80, 0x38) openat(r1, &(0x7f0000000040)='./file1\x00', 0x101000, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) sendfile(r2, r0, 0x0, 0xfffffdef) 14:40:24 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 70) 14:40:24 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 95) 14:40:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) 14:40:24 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 14:40:24 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 38) 14:40:24 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 75) [ 1537.051625] loop7: detected capacity change from 0 to 40 [ 1537.102219] syz-executor.7: attempt to access beyond end of device [ 1537.102219] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1537.102252] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1537.102353] syz-executor.7: attempt to access beyond end of device [ 1537.102353] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 1537.126813] syz-executor.7: attempt to access beyond end of device [ 1537.126813] loop7: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 1537.126929] Buffer I/O error on dev loop7, logical block 12, lost async page write [ 1537.127038] syz-executor.7: attempt to access beyond end of device [ 1537.127038] loop7: rw=2049, sector=52, nr_sectors = 8 limit=40 [ 1537.127586] socket: no more sockets 14:40:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000040)="19fd6a1ff567b8c0", 0x8, 0x28}, {&(0x7f0000000240)="ba3c0e7fc1740a1658818cf06f36708340fc988185714b00f8197ec7875feedce662eae26a796c87adec9a1ee2af44cb299433160b8982c2f7ab1b5c9800da9434a4b10cd5f72b1f623fab500a8c0dacc866d6c9e50530bb890d2687724275a700abcaee00b4d14590a83da73de514d9691c9a65be3e7ee442c732a3431121e8830ce43b76bf13b3bc9f649c27cabbb1905b544b130aef775e1a4dff798de3be19785fc2e22ec7a1336901aef7b0059816bfa2379df3ebae11710a90f35b35cb75eecbf5a8e22ca5d34d25c336b521b2dac91f", 0xd3, 0x6}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r1, r0, 0x0, 0xfffffdef) chdir(&(0x7f00000001c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) readlinkat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/90, 0x5a) openat(r0, &(0x7f0000000180)='./file0\x00', 0x20840, 0x10) [ 1537.395306] loop7: detected capacity change from 0 to 40 [ 1537.402475] FAT-fs (loop7): invalid media value (0x83) [ 1537.402495] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1538.230479] loop7: detected capacity change from 0 to 40 [ 1538.234993] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value 14:40:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 24) 14:40:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x2, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x58c133b28b010232) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) sendfile(r2, r1, 0x0, 0xfffffdef) 14:40:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 39) 14:40:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x971) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x10b, 0xef, 0x6, 0x3a6, 0x59, 0x0, 0x39c, 0x40}, "cacd8bef95067c243b3ec7c61b1e0bb35f0e0d739bcc5aa132b3a24a909193243cd62205686cad6e15e8a985b8ba4d8c112b07e4522b8a84696543b341b819c1126e8b27f4caa4295643369b80920cee85abfdf5715443c0fbffcb78cd9f85ac9aa612bf10b792daaff8e5ae2a260dad86a0366b134de9167ab04ee94f5da7b6951c9536fcb7d5ecd2f6edeeab64edb274b07fa555", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5b5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1000], 0x3e8) sendfile(r2, r1, 0x0, 0xfffffdef) 14:40:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 76) 14:40:41 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) 14:40:41 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 71) 14:40:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 96) [ 1554.044889] loop7: detected capacity change from 0 to 40 14:40:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 77) 14:40:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 97) [ 1554.202190] syz-executor.7: attempt to access beyond end of device [ 1554.202190] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1554.202220] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1554.202313] syz-executor.7: attempt to access beyond end of device [ 1554.202313] loop7: rw=2049, sector=44, nr_sectors = 4 limit=40 14:40:41 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) 14:40:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 40) 14:40:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 25) 14:40:41 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2dd, &(0x7f0000000280), &(0x7f000088a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (fail_nth: 72) 14:40:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[], 0x971) r2 = fsmount(r1, 0x1, 0xe0) r3 = dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r4, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) [ 1554.437175] loop7: detected capacity change from 0 to 40 14:40:41 executing program 5: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 14:40:41 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 98) 14:40:41 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 41) 14:40:41 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b56000/0x3000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 78) [ 1568.176783] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888041867a00 (size 256): comm "syz-executor.4", pid 8447, jiffies 4296220954 (age 22.623s) hex dump (first 32 bytes): 49 7b 08 46 80 88 ff ff ff cf ff 20 00 00 00 00 I{.F....... .... ff df 01 21 00 00 00 00 00 00 00 00 00 00 00 00 ...!............ backtrace: [<0000000062f014cb>] mas_alloc_nodes+0x36e/0x6a0 [<00000000674c78f0>] mas_preallocate+0xff/0x270 [<000000005efdd118>] do_mas_align_munmap.constprop.0+0x16a/0xfe0 [<00000000200187d1>] do_mas_munmap+0x1ed/0x2c0 [<0000000018c02839>] mmap_region+0x21c/0x1a00 [<000000006e40820b>] do_mmap+0x824/0xf40 [<00000000b050e51b>] vm_mmap_pgoff+0x1b5/0x280 [<000000003b0ec848>] ksys_mmap_pgoff+0x3cc/0x4f0 [<000000005be3bc2c>] do_syscall_64+0x3b/0x90 [<00000000da08dfb5>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 BUG: leak checking failed VM DIAGNOSIS: 14:41:04 Registers: info registers vcpu 0 RAX=ffffffff841c4e20 RBX=ffffffff85032900 RCX=ffffffff841a7261 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85007e18 R8 =0000000000000001 R9 =ffff88806ce38c13 R10=ffffed100d9c7182 R11=0000000000000001 R12=fffffbfff0a06520 R13=ffffffff858f0150 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff841c4e2b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd7d8acf58 CR3=0000000016c0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 656a626f20646563 6e6572656665726e YMM02=0000000000000000 0000000000000000 2936353220657a69 7328203030613736 YMM03=0000000000000000 0000000000000000 3820646970202c22 342e726f74756365 YMM04=0000000000000000 0000000000000000 2e2e2e2e462e7b49 2020303020303020 YMM05=0000000000000000 0000000000000000 6620666620666620 3838203038203634 YMM06=0000000000000000 0000000000000000 7365747962203233 2074737269662820 YMM07=0000000000000000 0000000000000000 2e32322065676128 2034353930323236 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffed10032aaca2 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000006 RSI=00000000000000fb RDI=ffffed10032aacd0 RBP=ffffffff81312825 RSP=ffff888008287cd0 R8 =00000000000001b0 R9 =ffffed10032aaca2 R10=fffffbfff0b1e02a R11=0000000000000001 R12=ffff888019556510 R13=ffff88800784f780 R14=ffffffff81312825 R15=ffff888019556590 RIP=ffffffff81774f1b RFL=00000a17 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5a8d41910 CR3=0000000016c0a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 656a626f20646563 6e6572656665726e YMM02=0000000000000000 0000000000000000 2936353220657a69 7328203030613736 YMM03=0000000000000000 0000000000000000 3820646970202c22 342e726f74756365 YMM04=0000000000000000 0000000000000000 2e2e2e2e462e7b49 2020303020303020 YMM05=0000000000000000 0000000000000000 6620666620666620 3838203038203634 YMM06=0000000000000000 0000000000000000 7365747962203233 2074737269662820 YMM07=0000000000000000 0000000000000000 2e32322065676128 2034353930323236 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000