573097705c5ea07af72aa876d236202f07a5fedc9c56b637b5ace57943f7e9a76fea06640930ae9e6d3b3023e8e4584841c34fc70004d20be40cb8bd95e8bdf4446a49ad4c70ae6ea816e6bb8e419016f6f739994690ab22ffcdb4e322135abb77d064fe7f1d03cd46120fabec644cb6f4bba0d891f4a86d", 0x94}, {&(0x7f0000001340)="dd9ff2961ed5a3a28a0c7a641964afe037ebe964cadfbd4f87341ad61ab24da2d9ade6df204d06e772243847fd6a3e4416022f51defbe35bc9502eae384c447c6537d6a3b0755bbf7c726571be3ae333c4671ce2", 0x54}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="128dfd0b7b6081e50ce8436c655fc84ff69b85bdc1b9ab5b5e4e21b1e908d29e94f3915b9b94c16efc6fc6bd37878cb160fa7b503bac7ac046dbb04671593a777b0e57021b5d3eaf2318fc3f5746f6b4fd6c8c7ecd948b87dfebb5984db485ce902549d0baabfcbd", 0x68}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="990524fad56fe9088a6de4de4083284fd5bb0d7e414cf955d3a85542b8d07dcb071c0de576d83485cbf5f7b738f8cd72e0fd939f59892ac861883d86d96b4eea61eca38c7188f3a506a5d38d", 0x4c}, {&(0x7f0000002500)="8ca0608446ec1f4f9de7e790a727f837e5a74aa46bf73f4dcbf72476b8d3237427739b86f80bcdca261dcda15bb2a1c302b920d63e7500aa5bf66e883b0409da623b8fee44b061a2f652475af67fae871b5de8a4375a93a6decb320ba563ede56e1431d84149a89348fdc8864fd8f7df633c1dd46d425d7017f43399831a3db489ffdc2a0ca1551782931efb709a9e5e76b1749bc5977cc65478cae7c54a087387647f9c4d8022985066abbe91d92cf6da4da49cab8a8cab97f47154d8290f1695f2ea97f2a31cfc6f34bbe3009bc02564ed7740f47e05273e74a48234", 0xdd}], 0xa, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x8004}}, {{&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000002800)="2d8499852ae4caf24f96f5b80cd2f8029d41eb06b39aa07f15935f928e996b7f4a53722f68356d89ba6b875ccb7c9b941461ab837a267ac099cd188ea53f0dbcc8bdd634eb4934e737137a0c", 0x4c}, {&(0x7f0000002880)="c7ee5d825243fa7bab745c9b333b1356020aa23b6eafb1924e4b7e38761d2c795367f63459483a8992aca47686aea539b4290cc5798388f4e374eadc745ecf0395862da8ea3ff24d8eda58a14f8f61f0387bd8d55cfacad2c8c856bf2ebb593395afac954c58efc0d5c3e06f094c5b2090ccdbb0fe98b54b58db9b3cfb194d0bd21c424c28118c30ce10dee57a50299cb68cd1c2cbbd06a031479594937b2350555fc105f6f988b64a94d3d5af9b127b705b68e84832eed1755ce6112a23c8776763b819f523d98f37da6466f5a0e830b1293fcbac72d3531442936615d165edecf427b03e5a1b98e6ced6d465124920743efc458840690cbf1e84e05a49684ffad6851216c3e42b8869b753f1a429b2512df5a8b987f2d39ab2468c6d2fa6886ebd41dba5ef27cbb7d9707ff409fdeb5546d5f1644758938702170b637f7abd3908e2099b4001e905a72d6d9574fa0243d7480afccd5ec3ef4bc78a99b89486ef161fb50a97fc215be4f41a9f6cdc708738201ecd4ec669964ea95f52ac4051214495bca0692e7e7d845e6afd756802074f3528b363ff14b6934cf28fb33ffee1d65907629881a7de65631eb2579e07c8702933cba97b20b9c66ad6ee74c22117f6a3466fbe4eaa3c3de1f20dc39e7ab28dfab3353b2145a6a26e50cc9ef333733cab397706fca62a0bce064423ef8ce9c7c7c96a085681f90438e8f3ccd6049fd806fd41f260159e7c905174e554b57d7e700a3cfa8ed77a1f5f6f60c49d2b509219fc5c532772e92e12d81b079a26d2c12f7043da5cb0852260cc4b70a492ffb7f2586b8ac2182c551aa5b0a28d3686f7de16f5e575e82018223a5de7c9c2f0a05a9b4ef7490a384be7fbc6ad0e979092528d65bb2a4a6dda1d6a38cbe630d77d6c7a6707d759163ac5300df7e5f47a2d0a0e3f285e12f36760d2c9cd79fd8835f81f68a6b08dee0f359b81f0a3777abaabb5012c6a4a6f352491da0b8b33b67506758bbb6a50e499357422499453eef2a7a1df250aa785d879dc0c5acf7196f4d922c5c26cf0558487e8a0f53ba9c045fe77f67ea62deec09f6281677444ecaacdbdc3f2bea116ccd9e7830648466008c04f302fc4d572848dbb753c5cbb183597652e1589c5b1df85541048f54e548f5ec56f30a63cb47c9427aa81f5871afa726dcb5f73437e5cf7c5df949019d0fcfd7b99d4968137b13675ee19f2870d0b09f4dad910fd51d76c14de879a1af0e649132340cae3bd7ed8542a6d357c54d16df87d8c86e123dd5a117436b63b77ad6fd1c1bf9a5f5b2d4629af87b51ffd5c37a54f401163ba20d5f647c4cfbcd5d140f4ecc669a0d9b699cf531676938e9970b54dfd4dc62e6450c3fdb67b126cd793d3c35224009f8df88720639ab69883ae470b0da3872be4427752745cd7c0cb1c8d86c4d62384a177169be0f41d7f194c61107826859251de51ba1f6e3cb515dd99673e12786781a2c75b46275f3d034e2f0d7eda001253779a7e14b60f4912e9cca0505a2f68202f52f3037c698a00c8d5cb6cd7d1478382d84b990ede4ee2c4dc7622e06c47b644ea92b69830f1d7f93e6df9e934fec802aa5b43ce6f057d1645ef68b08b1cb047ccd97bb3eaad09e3a6674ab3b311cf56f45cc593083e8442b1d3da3d0c0484aaa58118c8b5f26906da5b83d8c7b476d2f6cc3cbe3b16dc732c8bc428327cdc5b33dd1086c05d2f6d8eec36d1a2ecc0b2607c62ad0725e026d5707847bba14bcf898fe3e65390d851fbdb9aab3b3b65bd057f065815e3a292ed70691f96ef8cb60c44cb72e50db8ea84333751c532ba3df8073f576ed72bcf4e8d7ac296bab7e2b85d455325b1bb8a6954d28ff6119cf5c511f0991652e5a52d54172660d88c2f83f54e854c032235ae8f0d40afb4f009d0482ead3caf8978bf547299c591e7e60340bfddfa891ca088ce35c3f738219ec8f1dbfdf938b226296e31ce5bb98b8378e7b8ffe6a49de2445a782e616aa1045815ceca087a0bcf53d70d86672fa6f60176524cae03b0f20e10461dbb68fb498939123299b1efe49faef2050f78eaecc110bec3cb461fd04e059bc1790ae8f139bb782b77a7a74390cfb71a8e20c515dccdb2df02d892d8a361f6596b98fb5d43bf451f5d00ffa912bb75f90768818e6d8d352555721a48e12d82cdd9b6c582fed0148747b64dadd74b9dd82b7ccc89910f7ed3e60748e01d4bdb41f1fa0b7be06fd958bffc458e4dbb79d22f840a241528aca7319a012cb03af79f51441b0382f75225461820afbc726530c5512b07a5b03c4c2d56fcea88377af72c167039a022affc921067b508c7e1ad2b78dbe8fa0e183a3afc87e234a84832e0af3026028c9ec748f98d6a8394b5a897829af3f85c9238550943e19bbfaedfcdebb17f429a84309b90c78d6830f1b26572ade6dc40d2422370ab2e5298982703d77b954804de2dc9495d65bfb6b527dd2951b5cab56e63d9818a4eabdb826a2c5d77ba71a161bb1d871b44ac7d9e035eef43a0de5b88fb12c706d90596933dae7e3a785aa94c703c31e547d3a556b449b612f85f0f57d5e57724db9a0d1c3fc5eb2e2c06f3bd85f8c62e1d51959396e23cc9940ac4562de8984d4169e867b40e944210a41b80c18ad42cef9d1a5a8e8eddfb27484d693732ff03a5e3f3c42b637f8e240ee408ab2358264a7803fa10b1e4f92996e675d4ae4e9ad109da56d8bfc86ea0faeba82f8d1fa1b4364ccea80a6cdfb41c5012ebca6b2f3cf991d5655c878b6a3c2709cfe7de8102350d587370b5d1b5bf01777fbab7314f5c9ef4e8eb861175d7b73dcb7bd597d59c8367f4e08f5bf37c0004c5d2662ca1c038e517927f2ea9cb987f76dde550de25b861ea9ad2547830c4ee0fbece7a2954f29b5a6b5939cdd9f18e21ad02aba688f79ba3b6996bfb88196c18b75c02334c6f67cfbe32a74cb3d83bcf7c8cbbb4ab5127ab608a000bfab8d2c05e8b9fd17e47eefe2fdd9a0c5450e3b42de74260fcdfe26f1c8f22af9dd941d634a51d0d1c1fe83445535ff9f85cd4b1ee80addaf180ccefa82f081f348db8eeb36b3843955344eb0abc5fd998703e35d0f4dce88c82ad865cc9ec83c8a692dac98e4c52ef2eeb20ed267061ab6e755803eb1aebae5fc19ab7888e301b78733726e3c9093aaf04858ae1ee71d86ffd0a8f226c39163d4b1f61c66f0c84f0f278c802b7cb7de5b548a311b55d801ac74dbf60d0b03675e07c992c7326065dd0d47f21c6eb9dd4982fd54c519612b5f589a0865ce35a46a500cd193f150dac34b1925830fe3e201e9f7b322eb3006747356114c1c2ea029645f910e77101223b145007da668f2dbc5309d74572ad5b74f0477acf4c4f1d4b4cee737e7868dc4bf57b34c147f7901d90ed57077d58ea497d0719ecf0b373d431eb574cbf095031ba29125b47e80dc091dad75c0f13f112b0b5e1898ad829ea2728d3516a9dee9d26cd1e3546d0f437bb1b9fd9909f48681daef57dea6c4abc7afee84eb8ae15a5a8570691fddf738b241945ad9c152424978f4c2d410c34c0b669830a85584e43ac592af376146d150ae7cf676af72c1f809869b6ee184c8ec0b582c5d1ae920592b8ef9cc9410bdb3c032497af4d0f2cb8b30124fcf9f64709e4a70211988a35af40d1d6b8814e2f9187de8e17cd4a77af87292dcd81a614ff2ed626abb3052d199c8eb681fad01928c427bab20a819919f9a0e5001ff11756265d5076369b6a32bfc1a4243eea78b6a62740576af6fef8f827db493f9334d32a59529096c50201da0a4d39601a42936492a30098441fae47e4c707990fb9201cdbe256c8e5b1713b55b308d2c7271a04c2e0a5ba81a2cb0e107f3125b263534b3e4e7769e01e9cc2cb029a09557e01ce5ee2471583c6942804e0827eab6233542265e12acd12d703c88fc3955120ca73c85ca2f5968314a0361280f9c2f472d3d4532f118a06e90ee4bca61d036d7be725e3713f24ea097dd3db4a2903a592c59155b228c146529b7d0a5eacfd7bd2ead319da819695c5d1ad0bedf6cc6e9058f7eb1307c0c33fb23ff5abb237eeb811e434a6c67a52ed796c3eecf7db4cb354384ec010db56193ac08c82d4b721eda378f4632c2b240ab91ba4fe6be4eb45cfe63d4e049ea8905128251a6a5e32af06580c53f8ddfb64159bcc383bf65f3ca44b04a522d3596fb5224b57345563c2f8614d8fb23cd6f8eb0ba102251d13158d833b498106761effd05876c2424351aa52bba761b35e26b6afbcb60dde8669591b1eeb97473defa7844cc8903e3d3d0ab03278d23d7ec8b98c5267ec8078489ec433fa9192bd5133d57ce274307e0f11ad64f27879a7b5de8cce29f0da7e6b6435dd9186e5cc420f0ed1babeb428bfd8722e6ad64c58d69fc9bf17936cb3e455f4587128c442eeefc4231f5b0cd75660bf61e34027405ba9682e0df841f8a33ad7b6e239cc0d0bdc16367ff7d21750d8ece79cd03d930a1a5ebd85781cc00594a5898ced61db65dc8fd4254d9a7572245efd0a997b4d30b97ff5a7c07f5e61862c04bf5826f798f3cc1dc708541e24635efe0f26bced53109b226a484cac892048d7842a1c6f95ba8f30e0ec9dd3ba3dcedba53f7fff6e45db199709f6166daafde3526d64b4383104e81cd05072eafcfc1bb630b6f584d46e8be5d8495f5919ec07fa5d84aeb91e6c94242f149a7d0b7f69ed7b345ecb61b207a295d884c94d6024ced297166a81e127d87e6fdb4cca467cf3154d7af547f0914f6620e77ce23d535938e9245b9e2e8c5568b43727adb2974e07acd9e22401451ce24f7eab2ab3ee726d46104f40650f4c1165bddfc81e49f50624d68adeb7615f839d65dce22d9f0f5d168f2f8725bd6a83f4eeaad9ad7f0a228326ad12e77ccaf2bc2bcd6a0f7105ca5cbaff70ae2aa8deae377045bad3cb3aab13710431b814a25508735cb21e0eeb7dd527139d1ef722693a4f0114ab03b04f2728b15f8e9bc4d7e3a3a07a1ddf43e81050976bf584f63ca51dc6b750db3069c9cad4fd3c2313308c163601a13e8a8926aba61fc6c03b3b0b57ba677cb936347d9ac5c06eba41422a280046c8ebf4f2535e9bb929c9e4d82a2f1c0908858231becd1a3d9735b704d93567e832133a523d217993b9218ea35ef22d14b52696b6b2dde7f19679d5e1fdd6ebe1ac28e1c5fd0cb8a1e3b94d605e90588fa667ec15fcefdb0f8eff268fd12115a6b0d0dbd366e599af721f14ab5d3d4f1198765cb5ed2ff8463c51d637d9449f321fa8cf657216723607d7d6c9128b8cccf2b12c0bb864689ebc22ead7517247fb9d0d9847b6f0873bb1b0e7baa5e060444eef4b7f87f086d1229713e36fcff58ba199658bb403b78584dc35394a07019e85b65a9118cacf8d12b503549d2c49ca77a9022701bc97f1c545783255f0743510c8fa77dc3647c98a0e0de7c52ba092eba7d6a5c9372af5a05b5815fd67f7dbec086bf3619839b55133bffb45d52cff5b75ea376aefd1025a678629efd531839f63ca2fd711900579926aeefc77df340e13aa4470d1497c15c58d705e085555ce275d3f905fbfbf437992d129abf17c5e79fe03807dd003e70c6f02dc9c689199c51d56c8aed62affd840fc273f7ba26ad06081108b5e859ba5050e5e86f636802654a8479717b753e92655743c3f7b3f5ff83d5af8c978eacd88a7b61a9191f1a3316ed294a7e89b344e4c97880eff54ac06dbae0f15443ba68b028e497d7596c41d8c39c7eb344f77986007b41773a3501315918978", 0x1000}, {&(0x7f0000003880)="643bc5e2e71d96b154159806ed5005689a81a6b2a39343fb45d09ff0d365c0ac784737c6404c969cf6fecd7b96b89165323bb89de214ba2ff07b43f8032e3a476f65180b8c7ddb8bdfb3023eed0e266e98123f26d7d3c229ecf0db7e3156c6b4ce7645b7de5bee444727de3591b8365708b8985f4f1e41c31ab09d2c18e9892851bc0045b5f902e0aabdd09abb67389f11483744849ba5d3175a784242904c8d7c9eee555431c80086125ef87cf4fe718602e54a67a35e62ec51b50038fb70a04985e6cdcce5e32b75f42c36075877115d5ac8cbc14161cd7698536c431a07afdfab8ae699a675b161f30aa756519512dd", 0xf1}, {&(0x7f0000003980)="7b9c1d66298fa2abfdf20c2640aaec93810925d05bcb79f927351c20c8b5ae0dde842a2ef90a0520419f00ed23", 0x2d}, {&(0x7f00000039c0)="f6f2828f7bcd", 0x6}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="3aa0fa99ba3de0a3ff7b038300d983dbfb49bd26fdce4a4f99bc69d8a9735ca9aaed8d2b92a7dae4d3ae67395fc9f15a19e0b774cfc610232e0729c69d3b00e7735a38fd98994e33550826ac6208f8ad4a694da0ea9315d3e3fdc221bc35", 0x5e}], 0x7}}, {{&(0x7f0000004b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000004b80)="6f66059d8f09d5d02785fbb33c5da45ca25d49f00a7e0e6c408f3f93920cf75076381ba9b26ea515ce4a9eb24e34fbddb3cf8c6a33d8845301fcbea3e800a112926c7a8eb16d898562", 0x49}, {&(0x7f0000004c00)="3af2916c9c30d5e3c7a74d459b217792a8b68934dc10b49784d992960581ee3472100e23707859e00538ea89f857d598120d34e77134533ea5c574adadb8b1366c1a3a41a05928cd0c81a24e6adf74feff65375c8d40a7451d0a40077b1e25b4bfaeeceeaa50fe9f4cb20f266a6c304744f192edcea1200be043a38be9aaa8a48325f055d96e8dedb93e4e77e2d2660c6f1c01741853aa7e645f20a468387995f8975424bc5a4b5aa920ab904f6d8fc141f9ee53bdf55bff4c7609e5d59f9f5b01ded205aa743030275f44ac7d113f00d33b7ba571f49dac2b3ea87a5dd017bf79460b874d48f3d39ae76d8e5201ed3fe158e1008f5340d297fc000306", 0xfd}, {&(0x7f0000004d00)="5199d8e93a34e6e3a23a3662237b41cfd5a58b28af818d8e9b6ce2f07a32ed8dfbca09f8c1515dcdd08da07b67", 0x2d}, {&(0x7f0000004d40)="94fbd8aa6825f3df57dfc47e25f138d0f1fdd273aa7911663c7bdd23ac4e6f885fcc4f9beeb03043cdf7c861285c98bf86248cc24b79dd4c974ec5974934734d62cc0b88195fdebdf66d7e857fd3b58f27eb1d9ecb95578d4c39f823a6a1b5ee4dd35c", 0x63}, {&(0x7f0000004dc0)="ab3ae04c43adb183cdffc6adfca47393572d7f3ee2fca0b2f5a092c6e2a4be78c323031d7c543a3dfaba53e9d3d3276b5c945f166863feb657132ac8eef534b19ef7ce625f2c20d74a3d986c89aefb7a1b490e333656c5c61db8a90c5bdf6b4a0b148fcfe0a874b5703ef86199d72f1914a3507a57be88c266ee32dae247503fd276ec770b5de81f2f7e2c79012e85f972970daad8227fbac5809af21b7f31ddfa103b76a36ec605cc60988fd98b7af5", 0xb0}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="cbb1cec07a34eedd408294b83c3936407fcee5879b72f798c96a1fc2c70172becc04157527984cc792bc43c78a579b7771d97d37caae881c1a79cd1a24474066a9faa11d39929ce51eb58cb67d0042673ef5520b5ef5c2b9e036a48326a76daebc", 0x61}, {&(0x7f0000005f00)="708aa7aabe06f8f99c7718989d34ef4b2bb5f68b69c5a1347d0c476b219157479d8481497f7b859c47368b1701d7dde8ef2540e3ec69430a251096a2634af9e3164b249e98b6bba45fb331de0718ab64cc554b57e0e9d338a3b1059f1189200db424c4c530657f85c3d12b99a5f2a07e4282f65820b67d71ed8a85f01024a464401f2f5ee4cf38d3112a4c8a05f348a9d2bfc35f80bb80ed04cc2197849fca426b22556d17b68b1caf3c9ddc82a9c79047a1628b87270d07bfb30e09cd7592b0e80852a00a380019ccd3214ca85fc2a072587bc98d1ac9ad701dbd9db71431400ba9fd5a0a95f30246406f00a0fe2d", 0xef}, {&(0x7f0000006000)="1efd7c53abd717413a56405b42697b007081ca7fb407e2d3b575ad2f2909b38010fb274a0220bebd74bd57ac3a77bfc73cf6878c2eb602babf61078f026d795447e86ba476503a6baf8d76da2629cccab07a734833c840e34260707eb22ee98021390af478e0aa1de1ea5d81af43d8197e66927678ff6de2c19f2dbedde0127a333d6688baf46919005faa1c2dd522eb7088a979f33b6a30f3903fadb05aa71f102d", 0xa2}], 0x9, &(0x7f0000006600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x108, 0x800}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000006740)="14a8bbfbcb92167f7e75344f2383f20a066619ffc3f9ddff57be1ab34bb8af76136e13c164029101535eda8fe7670db9f22d21b928c57eea76ceabab5a77d30fac628114e92212891b57ab0eb93b246a328bb6ddd39771b38c2a865e146b3b48dc227b9e88ee87e051a7997991d2bcec56fb094ec22384752c552560226128bdc846c957c3d3a5528e72a92eb9be34401eaadd188be189c1a679bde8", 0x9c}, {&(0x7f0000006800)="a662156e67c836e985ef092f6e22d0a10d278ef7bbf835356e4082cc60d88ef49e24b9dcd19cfd63d21e3f064ca370cc9873bb60cae8a01c1ef5801303", 0x3d}], 0x2, &(0x7f0000006a00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x24048001}}], 0x8, 0x40) write(r6, &(0x7f0000000080)="01", 0x292e9) [ 2301.508988] TCP: TCP_TX_DELAY enabled [ 2301.531062] syz-executor.3: attempt to access beyond end of device [ 2301.531062] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2301.531983] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2301.554007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.555135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:12:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x3}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 2301.605156] loop5: detected capacity change from 0 to 107 [ 2301.612318] loop7: detected capacity change from 0 to 264192 23:12:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd92f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2301.657709] syz-executor.3: attempt to access beyond end of device [ 2301.657709] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2301.659425] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:02 executing program 6: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = inotify_init() ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000004c0)=0x3) getsockname(r1, &(0x7f0000000140)=@nl=@unspec, &(0x7f0000000000)=0x80) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r3, 0x5409, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xf2) openat(r0, &(0x7f0000000080)='./file1\x00', 0x424080, 0x8) write(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000300)="4561ad869c4590e017ad4683cf4865d5d50aa1c768164ac05f009419dd276e12e1d32b3fca5b7093a91cf33abbddcb46e7d3b0f3ad5b5c60f7ec1ce2ce5b627612366b27eec5318da889ce582dc8ff41ed7015db8d857657237a41967ce1dd49ff089dbd5f897e944aca75e4e9371b1ff6b123c79842586b93b4d85117a3af8f089508b418bcd4956efe4590e48436244e65425637e9efc88371afa8c3258e6c743d454e9bff2feabcd86d3182b45b0bc237efd3e63f", 0xb6) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x404, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r4, r0, 0x0, 0xfffffdef) 23:12:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) 23:12:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x19010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2301.699903] loop5: detected capacity change from 0 to 108 [ 2301.707660] loop7: detected capacity change from 0 to 264192 [ 2301.737249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.738259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:12:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24242, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) r4 = openat(r3, &(0x7f0000000440)='./file1\x00', 0x400080, 0x78) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000480)}, 0x10080}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, 0x0) open(&(0x7f0000000400)='./file1\x00', 0x800, 0xc8) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r5 = accept4(r2, &(0x7f0000000300)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x80000) getsockname$unix(r5, &(0x7f0000000380)=@abs, &(0x7f0000000240)=0x6e) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r4, r2, 0x0, 0xfffffdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x292e9) 23:12:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1b010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2301.868309] loop3: detected capacity change from 0 to 40 [ 2301.898434] syz-executor.3: attempt to access beyond end of device [ 2301.898434] loop3: rw=2049, sector=100, nr_sectors = 12 limit=40 [ 2301.930175] loop5: detected capacity change from 0 to 112 [ 2301.936456] loop7: detected capacity change from 0 to 264192 [ 2302.093988] syz-executor.3: attempt to access beyond end of device [ 2302.093988] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2302.095138] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2302.117708] syz-executor.3: attempt to access beyond end of device [ 2302.117708] loop3: rw=2049, sector=100, nr_sectors = 12 limit=40 23:12:14 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44080, 0xc) openat(r0, &(0x7f0000000040)='./file0\x00', 0x44400, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) setresuid(0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x28, &(0x7f0000000280)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'target default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}]}}) 23:12:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:12:14 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:12:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r3 = openat(r2, &(0x7f00000003c0)='./file2\x00', 0x402, 0x1d4) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x20, 0x0, 0x1, 0x0, 0x81, 0x58, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x2003, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffb, 0xfffffffd, 0x9, 0x0, 0xbe5, 0x0, 0xb8}, r4, 0x0, r3, 0x0) open_by_handle_at(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000020000000b0000000017000000000002001f6500e52c0fb811ba9f9d2bdd8f1046e7b57a676e1f98dbc0165fa90deebc8ba960ab862da07953031d7ae423ad3aa868e1a8092b9d6739cfa1577a34ba335c6c805e514ef682cb9bfac47ecc78ddbcaa1f5d7b91cb7fca55394e7a633a5287265f981c40dd1769c7791b007f6f1aa4bba218b4655c08d33b00291dd0598a49f1ee6f457648fb5644488c45ba9e0a9330a433c3252f54f9bbb1c231f1244bb28edaf8e3bd9fe12054865c3bcb34b016e48f68d2dd5dee635d250000"], 0x414c01) 23:12:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1c010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) sync_file_range(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x77, 0x9, 0x17, 0x3, 0x0, 0x64, 0x80, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3f, 0x7}, 0x2000, 0x0, 0x9, 0x9, 0x5c, 0x0, 0x8, 0x0, 0x7c2}, r3, 0x1, r1, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:12:14 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="040100002d00010000000000000000000c00000001000000110000ece700000040dfdf6a100b04dbb57afb10d33ba91f12d18f7ff59dc6dde86546ae4439ed8829ab944e2df0c6043653b62ceb932c111e8db8a15880a08d394234633a28815ef08225c067054ba92aa5482e95f4e97461ccbaa6d6bcec6dd35ecf72ecb44c8ec6f32ebfaf6b9c834c32675c65f3e4a370d74d7941f5094b89b5fa727bad09964fb627ccbcd7baaa0a184d490153781baddf44efd0b889a9e5b4366e7ee82671697c9e67e9ff9686384dab6133cca5e2826ab523d9bdf9fea6a70718b1b4ff982fa5add9d26384f17c8235e8de1483aa7080ccb300"/260], 0x104}], 0x1}, 0x0) [ 2314.129205] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2314.143282] loop5: detected capacity change from 0 to 114 [ 2314.157946] loop7: detected capacity change from 0 to 264192 [ 2314.162137] loop3: detected capacity change from 0 to 40 23:12:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2314.217716] syz-executor.3: attempt to access beyond end of device [ 2314.217716] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 23:12:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x0, 0x7, 0x0, 0x200, 0x82000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc0000000, 0x4, @perf_config_ext={0x5, 0x1}, 0x14000, 0x4, 0x6, 0x9, 0x2, 0x3, 0x7, 0x0, 0x101, 0x0, 0x7edb}, 0xffffffffffffffff, 0x2, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2314.218699] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2314.221314] syz-executor.3: attempt to access beyond end of device [ 2314.221314] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2314.222190] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2314.242470] syz-executor.3: attempt to access beyond end of device [ 2314.242470] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2314.243449] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2314.248183] loop7: detected capacity change from 0 to 264192 [ 2314.258830] loop5: detected capacity change from 0 to 118 23:12:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2314.340167] loop7: detected capacity change from 0 to 264192 23:12:28 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:12:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xffff0000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:12:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c0000000100000000000000040000000c00038008"], 0x2c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x2, 0x7, 0x6, 0x0, 0x5, 0x40c08, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0xfe0bb5c053ed01a1, 0x7, 0x6, 0x0, 0x1d3e, 0x48f, 0xde, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r1, 0x1) 23:12:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="38ae229c288a30c7f35d7760af2cb70f00", @ANYRES16=0x0, @ANYBLOB="100026bd7000fbdbdf25100000000800310004000000050033000000000005002f00010000000a000900aaaaaaaaaabb0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r1 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) readahead(r1, 0x0, 0x3ff) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r2, &(0x7f0000000240), 0xf) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x20000, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x7}}, {@common=@mmap}, {@sq={'sq', 0x3d, 0x8000}}], [{@dont_measure}, {@smackfstransmute}, {@uid_gt={'uid>', 0xee00}}, {@euid_lt={'euid<', r3}}, {@fowner_gt={'fowner>', 0xee01}}]}}) 23:12:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5c7, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000640)="9c88280fda129405e399cf84fa76505e479449c8585f2492ab3931a74d2a601aaef87a6902b1bb14981ac5e4c5807e025152ef2a58a6060ea3e05b9f199c94a054d5c19ebd97d28c454c882eebbe50b69be1ee79cc77145d238385df42c12a373d52f127e84ff73de56cf80831e4ca75ef074f23270a257ca1e2b767b224c32c4e2663e09181313f", 0x88) r4 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000740)={0x5, 0x80, 0xc3, 0x78, 0x40, 0x5, 0x0, 0x4, 0x4, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000240)}, 0x4040, 0x3, 0x18, 0x0, 0x10000000000c86, 0x7, 0x101, 0x0, 0x8001, 0x0, 0xba}, 0x0, 0xffffffffffffffff, r4, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r5 = eventfd(0x5) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x3, 0x64000000}, 0x100, './file1\x00'}) write(r3, &(0x7f00000007c0)="ce33d1c9b34957b830471a309908f511bc7fafb50b7b6f2c812a8682fca4c41d2fa74adcfb556f786c3ffdefd82b09cf5d241e68ed65711a6e6b8bb7f24db7c40d1eaac80c9ee37c02e968daac2b271f5fe6a94b7917128fd0ccd94b197a76ab6dc7ed6314d2e2e860d42cd52d899b499dea19b08d28f11196d10623e75743b8d155d402382903561d6c9d98eaeb738029ccdf02059c72f15377d71a92931243fd644abc2f3f8735b9d75e82a43eb680ad532aff94c1212941a4f4a6688626d9cee05124d407fe", 0xc7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000700)="0ca0a550f02d3491eb", 0x9) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x10, 0x4, 0x8, 0x3f, 0x0, 0x2, 0x4112, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x5}, 0x4ca08, 0x2, 0x9, 0x5, 0xba2, 0x10001, 0x1, 0x0, 0xfff, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r3, 0x4) 23:12:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$ptp(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f740)={0x200, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}], 0x0, "12f372f304289a"}) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r12, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7f}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r13, 0x0, 0x10000027f) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) io_setup(0x1f, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000300)={r14, r15/1000+60000}, 0x10) 23:12:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xef00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2327.467681] loop3: detected capacity change from 0 to 40 [ 2327.496639] loop7: detected capacity change from 0 to 264192 [ 2327.498863] loop5: detected capacity change from 0 to 119 [ 2327.507009] : renamed from lo (while UP) 23:12:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf904, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x141042, 0x110) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:12:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x27000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="a7", 0x1}], 0x1, 0x0, 0x0, 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x10) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x200000, 0x108) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mknodat(r4, &(0x7f0000000180)='./file0/file0\x00', 0x1000, 0x1) write$vga_arbiter(r4, &(0x7f0000000240), 0xf) 23:12:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$ptp(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f740)={0x200, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}], 0x0, "12f372f304289a"}) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r12, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7f}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r13, 0x0, 0x10000027f) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) io_setup(0x1f, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000300)={r14, r15/1000+60000}, 0x10) [ 2327.677083] loop5: detected capacity change from 0 to 124 [ 2327.686705] loop3: detected capacity change from 0 to 40 [ 2327.698289] loop7: detected capacity change from 0 to 264192 23:12:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x28000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfeff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2327.812986] syz-executor.3: attempt to access beyond end of device [ 2327.812986] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2327.814231] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x308003, 0x112) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) [ 2327.844801] loop7: detected capacity change from 0 to 264192 [ 2327.858486] syz-executor.3: attempt to access beyond end of device [ 2327.858486] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2327.859764] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2327.884990] syz-executor.3: attempt to access beyond end of device [ 2327.884990] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2327.886196] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2327.887549] loop5: detected capacity change from 0 to 127 23:12:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000400)=""/141, &(0x7f00000004c0)=0x8d) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x6, 0x9, 0x6, 0x0, 0x6, 0x10284, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x9}, 0x96040, 0x646, 0x4, 0x0, 0x0, 0xdcf, 0x5, 0x0, 0x5, 0x0, 0x7a04b3d9}, 0xffffffffffffffff, 0x10, r0, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r1, &(0x7f0000000080)="01", 0x292e9) 23:12:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff2f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c0000000100000000000000040000000c00038008"], 0x2c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x2, 0x7, 0x6, 0x0, 0x5, 0x40c08, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0xfe0bb5c053ed01a1, 0x7, 0x6, 0x0, 0x1d3e, 0x48f, 0xde, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r1, 0x1) 23:12:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xffffff8c, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:12:41 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:12:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000200), 0x8) shutdown(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file2\x00'}) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) [ 2340.422156] loop3: detected capacity change from 0 to 40 23:12:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x94) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2340.443123] loop7: detected capacity change from 0 to 264192 23:12:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x141042, 0x110) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2340.499863] loop5: detected capacity change from 0 to 127 23:12:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) openat(r0, &(0x7f0000000000)='./file1\x00', 0x2c0, 0x42) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 23:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x37ac0100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2340.542961] syz-executor.3: attempt to access beyond end of device [ 2340.542961] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2340.543996] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2340.549683] syz-executor.3: attempt to access beyond end of device [ 2340.549683] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2340.550490] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2340.565122] syz-executor.3: attempt to access beyond end of device [ 2340.565122] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2340.566156] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2340.569071] loop7: detected capacity change from 0 to 264192 [ 2340.571584] syz-executor.3: attempt to access beyond end of device [ 2340.571584] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2340.572423] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2340.656062] loop3: detected capacity change from 0 to 40 [ 2340.668846] loop5: detected capacity change from 0 to 127 [ 2340.696866] syz-executor.3: attempt to access beyond end of device [ 2340.696866] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2340.697883] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:12:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x8}], 0x410, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="e0595a950e92efed11b0c597a092f38a24477a41412dc293a15621a047af89bd146882ffc60e0c1cc288bd9040c7aabff0dad4637be9f5ce13bb8ad9323d99792db14d4ef099fac37cb7c4449f2c8be8b527ff", @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) [ 2340.725034] syz-executor.3: attempt to access beyond end of device [ 2340.725034] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2340.726076] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1ad09, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2340.752156] syz-executor.3: attempt to access beyond end of device [ 2340.752156] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2340.753051] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2340.806750] loop5: detected capacity change from 0 to 214 [ 2340.822538] loop7: detected capacity change from 0 to 264192 23:12:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xfffffff6, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:12:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x90) 23:12:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x509042, 0x10c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000001180)={&(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x800}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x80, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x1, 0x4, 0xf0, 0x0, 0x0, 0xfd, 0x80002, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x8, 0x8}, 0x8220, 0x3, 0xc338, 0x4, 0x43c, 0x5, 0x401, 0x0, 0x8, 0x0, 0x1ff}, 0x0, 0x5, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) sendfile(r3, r3, 0x0, 0x100000) 23:12:53 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:12:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:12:53 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:12:53 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = memfd_secret(0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000500)={{}, r9, 0x12, @inherit={0xfffffffffffffe4c, &(0x7f0000002940)={0x1, 0x3, 0x5, 0xffffffff, {0x28, 0x0, 0xe4, 0x5, 0x9}, [0x1, 0x13fdbcef, 0x81]}}, @subvolid=0x80000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000140)={{r4}, r9, 0x0, @inherit={0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="0100000000000000010000000000000001000100000000000900000000000000120000000000000009000000000000000100000000000000070000000000000007000000000000000100000000000000d8fc44d629551c7318044898507b70036d375bae94802152bd77941ad4e5e99e46e0d435741f46065869085ff3843eb7aa6293f90dfc47cecd231a503df51664f3b38da0be1b3f8f9d334a570ff9d3b1f63c54d579e6c8ceb26cec417bd497a9c0b8ceb6ef668cbced464b44214f27dc82741ae9020be97fae7285c035d49a8bb82b5198d2648a8136ebf125891acf"]}, @name="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"}) read$ptp(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f740)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r12}], 0x0, "12f372f304289a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d100)={0xfffffffffffffff8, [{r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7}, {r6, r8}, {r6, r8}, {r7, r8}, {r6}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {}, {r7, r8}, {r7, r8}, {r7}, {r7, r8}, {0x0, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6, r8}], 0xe9, "68d7033db844ec"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000005e100)={r8, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x7, [{r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6}, {r6}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {r6}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {}, {r7, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {r6}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7}, {r6}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {r7}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7}, {r7}, {r7, r8}, {}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7}, {r6, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6}, {r6}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}], 0x7, "b2550c95d88279"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000060100)={0x5, [{0x0, r8}, {r7}, {r6}, {}, {}, {}, {r6, r8}, {r7, r8}, {}, {r6}, {r7}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r7, r8}, {}, {}, {r7, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {r7}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {r7, r8}, {r7}, {r6}, {0x0, r8}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r7, r8}, {r6}, {0x0, r8}, {}, {r6, r8}, {r7}, {r7}, {}, {r6}, {r6}, {0x0, r8}, {}, {r7}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {r6}, {r6}, {0x0, r8}, {r6}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r7}, {}, {0x0, r8}, {}, {}, {}, {r13}, {r6}, {}, {}, {r7}, {r7, r8}, {r7}, {r6}, {r6}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {r7}, {}, {}, {r7, r8}, {}, {}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r7}, {}, {r7, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r7, r8}, {}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {r7, r8}, {r7}, {}, {r6}, {0x0, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {r6}, {r6}, {r6, r8}, {}, {r7}, {r7, r8}, {}, {}, {r7}, {r6, r8}, {r6}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r7}, {r7, r8}, {0x0, r8}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {r7}, {r6, r8}, {}, {r6, r8}, {r7, r8}, {r6}, {r6}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r6}, {r7}, {r6, r8}, {r7}, {r7, r8}, {}, {r6}, {r6}, {r6}, {r6}, {r6}, {}, {r6}, {r6}, {r7}, {r7}, {0x0, r8}, {r7}, {}, {0x0, r8}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {r6}, {0x0, r8}, {}, {r7}, {0x0, r8}, {r6}, {0x0, r8}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r6, r10}, {r18, r8}, {r6, r19}, {r7, r8}, {r6, r20}], 0x8, "4c011ac8cd36ed"}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000140)={{r2}, r9, 0x0, @unused=[0x1, 0x5, 0x4, 0x1], @name="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"}) [ 2353.221298] loop3: detected capacity change from 0 to 40 [ 2353.242753] loop7: detected capacity change from 0 to 264192 [ 2353.266963] loop5: detected capacity change from 0 to 256 23:12:53 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) shutdown(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@val, @actul_num={@val=0x2d, 0x800, 0x4b}}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x81, 0x9, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x2204, 0x7, 0x4, 0x8, 0xada, 0x2, 0x800, 0x0, 0x8, 0x0, 0x800}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r2, &(0x7f0000000240), 0xf) 23:12:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2353.334996] syz-executor.3: attempt to access beyond end of device [ 2353.334996] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2353.336089] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaad92, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x80000007fff}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) [ 2353.350884] syz-executor.3: attempt to access beyond end of device [ 2353.350884] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2353.352395] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2353.377480] loop7: detected capacity change from 0 to 264192 [ 2353.385632] syz-executor.3: attempt to access beyond end of device [ 2353.385632] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2353.386721] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:12:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x1ff, 0x0, 0xbd, 0x7}, {0x4, 0xc0, 0xcc, 0x24}, {0x0, 0x3, 0x8, 0x9}, {0xd1, 0x5, 0x8, 0x8}]}) [ 2353.422846] loop5: detected capacity change from 0 to 512 23:12:54 executing program 2: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x30) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x11f) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) 23:12:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:12:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4e000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2353.480035] FAT-fs (loop3): bogus number of reserved sectors [ 2353.480717] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2354.325438] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 23:13:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xedc000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:13:05 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:13:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)=""/203) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 23:13:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2365.010717] loop5: detected capacity change from 0 to 768 [ 2365.014016] loop3: detected capacity change from 0 to 40 [ 2365.023840] loop7: detected capacity change from 0 to 264192 23:13:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2365.115935] syz-executor.3: attempt to access beyond end of device [ 2365.115935] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.117782] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:05 executing program 4: setxattr$security_evm(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x5, 0x0, 0x0, 0x85, 0xd3, "9844b520bb18ae687ede8d7df39279d8111b6c54da1737091a97c458c1c197ff292d817a52e94690444fe2d812d8f9cf3fa6121cf6c55155ad7691d9f8a7f50b90327a23f181142ab133d662078eacafa24365b55be4be58a6938db5c012ab07a7785a1e805c00d3ecf6bb92da1b31cd757b5709dc6cbcf5cab36b9501febfff64ec9580a975a0865f2b5e94fe4205196177b0af2a6d658f623da09ea2d09040c48b14b6fbe3e58f2bb9632af6e2a90d2cfd899204504bdce5361053db7bfada4c430f3e7630f8752c151ca52f077edcbc8bfa"}, 0xdc, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) shutdown(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x2}, {0x0, 0x0, 0x7}], 0x410, &(0x7f0000000280)=ANY=[@ANYBLOB="57e9582ac63fd0a53a25d1628aaf0835c8a55266b1598f3bda94b778358c5b473083ac68bef65f3f9e32c6a540492a2faea21380f0be3e613b7e7de4eb2ddd5c96e2dff1bb21e2234c4509d4bbb9fb627e2be87713f25bd8c87f43cb0f5d40dad17572ec0e6af83f8ed769176f3f7915b807dc5ed2698eca466f0c89aff9fd2bc92e6dba9598ada82f6814a1988b7f6a0d50f004cee587ab488d023e26690b09e2e7eff1cecf47fd890b451d4cd6ea8ed133", @ANYRES16, @ANYRES16=r0, @ANYRESHEX, @ANYRES32=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x0, 0x8, 0x7, 0x19, "54749d2c51097ea55c0a181ecc17ea3912524aa234b967a510"}, 0x22, 0x5) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r3, &(0x7f0000000240), 0xf) [ 2365.143035] syz-executor.3: attempt to access beyond end of device [ 2365.143035] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.144875] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2365.156326] loop5: detected capacity change from 0 to 1024 [ 2365.163773] syz-executor.3: attempt to access beyond end of device [ 2365.163773] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.164705] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2365.181372] loop7: detected capacity change from 0 to 264192 23:13:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:05 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2482, 0x40) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x202002, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000200), 0x8) shutdown(r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000200), 0x8) shutdown(r5, 0x0) r6 = timerfd_create(0x0, 0x80000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000200), 0x8) shutdown(r7, 0x0) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000280)="5b98903d3c4baf8e64e3dd2adb9f3366a6918ab02897ca3e0ed83d3c30affb1b370221347992bcf776f2af88b75de5453e12ce7319815753f4c14af7246c61a6d992e147a19e21a6586bab31a0e60d26ab1d353fd778b8f8f07082301f47f15673208d373c4fc3223324f4bc1f3dd58a7ebb921ca98de798347c00a4a845dcc1b1758d3c", 0x84}, {&(0x7f00000000c0)}], 0x2, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r1, r3]}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r4, r0, 0xffffffffffffffff, r5, r1, r1, r6, r7]}}], 0x60, 0x4008087}, 0x40) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) 23:13:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2365.294777] loop3: detected capacity change from 0 to 40 [ 2365.302994] loop5: detected capacity change from 0 to 1280 [ 2365.339044] loop7: detected capacity change from 0 to 264192 [ 2365.396911] syz-executor.3: attempt to access beyond end of device [ 2365.396911] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.397791] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2365.415597] syz-executor.3: attempt to access beyond end of device [ 2365.415597] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.417156] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2365.453835] syz-executor.3: attempt to access beyond end of device [ 2365.453835] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.455948] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2365.462665] syz-executor.3: attempt to access beyond end of device [ 2365.462665] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2365.463520] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000500)="04000000646f7366d8a02b00080101000440002000f801628f76d58e6f7db7a0f7feaebd73745770c3fa8f597e827e7c041f16d66624f5363005d82d8a9210a2f8ab6661febfaaa59f9385caa8b1eeba5a29511115199b226e9770119dee120335ee3dc541127fc4db7c4543703c80a1454132039901c760135b1093797752acd61fda80a2f8dc52baedda026465a61c9e5d6e9da6ec4a5936c5a48c1567aa8f7392b4969250600000", 0xa9}, {0x0, 0x0, 0x2800}], 0x8000, &(0x7f0000000340)=ANY=[@ANYBLOB="92f8ca7935e679d98e52cc6b2f147a13b876ec93ec232916861ee60ea136806b5eec4c847ca6645106036f0b1dee7b6675c568af345c5f1d8148daaaae9d93f38870fe758289fa6e40d935d2b101d1805de55e76d1fcfcb3919a759230d7b92b549b280eed31b3d7984dc59612cfaa6cd8bd10916bde82cecdeb35fa9961268262baf38ae7917818466a168cc93b614bcb2caabea06d25de5fa3114620a3ca03b4851772ba415ac035979e9e29f9e92c9858b7e6e98611e0ea2874c89be0a64d9923e0227102c1", @ANYBLOB="c770ff1718a3e981b2f7a7d37cb285e3f28e18a24ec639439ccf8dcde93f9c6ce066a66addfc060c6b00592ab9d3c8c7934f95a3a4f74158f2a9c926ab111b5640e2a19ac5558f2ecb09725c590d6907b6c32b7564712ef3a22174a8c930236e86dd9f175d16d6a53360bd68e4e737541c74081f02fe20bff323cb84838d8f6d216c06b54e7928c8b2c05ab3ef1637c51c64c1542f0bdd91d36e8fb0a37b3c91ec8df0918dd21465ef79b84352a481943fd686265968c05b53b1bcd15fb81bd0f4b9fba0ee498f67"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x9, 0x6, 0x0, 0x4, 0x2, [{0x3f, 0x3f, 0x4, '\x00', 0x3003}, {0x1fba, 0x9, 0x5, '\x00', 0xb}]}) 23:13:17 executing program 6: syz_emit_ethernet(0x102, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x32, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x7, 0x9e, [@multicast1]}, @timestamp_addr={0x44, 0x2c, 0xbe, 0x1, 0x0, [{@local, 0x7fff}, {@broadcast, 0x558f}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3b}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0x4, [{@multicast1, 0x3c}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x14, 0x99, 0x0, 0xd, [0x5, 0x3, 0x3, 0x44]}, @timestamp={0x44, 0x14, 0xa8, 0x0, 0x7, [0x8000, 0x7fff, 0x0, 0x8000]}, @generic={0x83, 0x10, "f0bb658e0862eb115fd196a4ca60"}, @ssrr={0x89, 0x1f, 0xae, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "c10dc728ed71c2c9ac69127e"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4}, @nop, @md5sig={0x13, 0x12, "f950936591cecdcd8ad2f6296642e9dd"}]}}}}}}}, 0x0) 23:13:17 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x78000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:13:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2377.227148] loop3: detected capacity change from 0 to 40 [ 2377.260082] loop7: detected capacity change from 0 to 264192 [ 2377.282971] 9pnet_fd: Insufficient options for proto=fd [ 2377.290092] loop5: detected capacity change from 0 to 1536 [ 2377.295085] syz-executor.3: attempt to access beyond end of device [ 2377.295085] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2377.296086] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2377.309467] syz-executor.3: attempt to access beyond end of device [ 2377.309467] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2377.310381] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:17 executing program 4: msgsnd(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000008dc470fdebbf60e96c1f1c9459a7f1a05cc4018ccf2e280a880e1b01e201f57aa3578f9377b98dddb44309bfbcb64d02e98d3310d3ba7b6efd0904a3e96fbd47d432c52f2aef4e2a9ddd953d1bfdef24c7795196f8580bcc21f53fbd3298a31506586e4b7a0701a35d4af1863be5b1961be045578752a664057be52bcdcbd4d381be0ec6f745b9413fcdfa9db0092672fbd840c77400"/170], 0xa8, 0x800) r0 = msgget(0x0, 0x188) msgsnd(r0, &(0x7f0000000000)={0x2, "f2b08a831942e8eb80cbe5fcb31bfadb3bc5ad3dc5d852649129e50c0f3cfcb443ffe1f7851fc75cc1dcad96dc24eb9a675ae9eb98200040a52187d491f3c0a6d40304ccadc465a87cc7ffad8e224bd60c91a87f4e22628059a608"}, 0x63, 0x800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) [ 2377.335968] syz-executor.3: attempt to access beyond end of device [ 2377.335968] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2377.336841] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2377.343506] syz-executor.3: attempt to access beyond end of device [ 2377.343506] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2377.344459] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2377.397723] loop7: detected capacity change from 0 to 264192 23:13:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x2) openat(r3, &(0x7f00000001c0)='./file1/file0\x00', 0x210640, 0x100) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:13:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) [ 2377.449937] loop5: detected capacity change from 0 to 1792 [ 2377.452177] loop3: detected capacity change from 0 to 40 23:13:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2377.505583] syz-executor.3: attempt to access beyond end of device [ 2377.505583] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2377.506732] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2377.526531] syz-executor.3: attempt to access beyond end of device [ 2377.526531] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2377.527568] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2377.544973] loop7: detected capacity change from 0 to 264192 23:13:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2377.572051] syz-executor.3: attempt to access beyond end of device [ 2377.572051] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2377.573107] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x400000}, {0x0, 0x0, 0x2801}], 0x1a24410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x100000, &(0x7f0000000180)={'trans=unix,', {[{@cache_mmap}, {@access_uid={'access', 0x3d, 0xee01}}], [{@audit}, {@seclabel}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}]}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) ioctl$CDROMRESET(r0, 0x5312) open_by_handle_at(r0, &(0x7f0000000280)=@raw={0x44, 0x97, {"7a80daaef816a1f35efa68a949cff4ea572432bb2e76be196c588cae5202d2d95cd7ff711a11920698e4cdce121a02a01c6c6b33ceaff44c1d0cb341c21a18c284dc7d"}}, 0x644080) [ 2377.603925] loop5: detected capacity change from 0 to 2048 23:13:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:13:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xaa200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:13:30 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0004ff010000fcdbdf250e0000000c000600000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00060002000000020000000c000600030000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000e000200000008000300", @ANYRES32=r8, @ANYBLOB="08000e080a000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x51) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000240)={&(0x7f00000004c0), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000844}, 0x20008890) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x64, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 23:13:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000200), 0x8) shutdown(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x80000, 0x2, 0x1}, 0x18) symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000380)='./file0\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x292e9) 23:13:30 executing program 4: r0 = fork() tgkill(r0, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) write$binfmt_aout(r1, &(0x7f0000000280)={{0xcc, 0x6, 0x1c, 0x268, 0x206, 0xd2f, 0x2e9, 0x6}, "110f9a8a4eb39fdd2205ef1de086d8597aacac4ef32068800f139cafaa748a9d77ca4b2bf3d0587de63388455617667227205a0e67e77235710d3e3da34799f25836f807dc64d0451b9277499bf56f649bb2f6397a2c49d23ff19e80e590c885bf71b909a3a4626144395edf7fc399f9711d1d59c2e601aa4843c6842db7239ac180f4b228a484e67e4f20c10b632eb7697581bdbbd030ebec05cb5299aaedac67e8136ff64dee21577c33d445f87c742b1f6cc5184176aaf1f5e397b6ac3596f3eced35a8c20fdf06ad3b81e6a325", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8ef) fork() 23:13:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2389.461258] 9pnet_fd: Insufficient options for proto=fd [ 2389.467391] loop7: detected capacity change from 0 to 264192 [ 2389.470300] loop5: detected capacity change from 0 to 4095 [ 2389.501249] loop3: detected capacity change from 0 to 40 23:13:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xab200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xaa200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2389.566271] loop7: detected capacity change from 0 to 264192 [ 2389.594763] syz-executor.3: attempt to access beyond end of device [ 2389.594763] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2389.596503] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2389.600305] loop5: detected capacity change from 0 to 8192 [ 2389.619558] syz-executor.3: attempt to access beyond end of device [ 2389.619558] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.621273] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xba000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2389.654925] syz-executor.3: attempt to access beyond end of device [ 2389.654925] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.656004] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2389.668500] syz-executor.3: attempt to access beyond end of device [ 2389.668500] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.669367] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xaa200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) shutdown(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x410, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r2, &(0x7f0000000240), 0xf) [ 2389.696928] loop7: detected capacity change from 0 to 264192 23:13:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x200, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:13:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2389.794829] loop3: detected capacity change from 0 to 40 [ 2389.842202] loop7: detected capacity change from 0 to 264192 [ 2389.887158] syz-executor.3: attempt to access beyond end of device [ 2389.887158] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2389.888618] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2389.904214] syz-executor.3: attempt to access beyond end of device [ 2389.904214] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.905205] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2389.929757] syz-executor.3: attempt to access beyond end of device [ 2389.929757] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.930738] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2389.932266] syz-executor.3: attempt to access beyond end of device [ 2389.932266] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2389.934025] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0x3e, 0x0, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:13:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:13:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xaa200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc7200400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0xe0, 0x4, 0x0, 0x0, 0x0, 0x6028, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x65de, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x8000, 0x85d3, 0xc5c, 0x5, 0x573, 0x7, 0x0, 0x0, 0xa20, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r4, 0x8) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:13:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2401.250098] loop3: detected capacity change from 0 to 40 [ 2401.266268] 9pnet_fd: Insufficient options for proto=fd [ 2401.281131] loop5: detected capacity change from 0 to 32896 [ 2401.286818] loop7: detected capacity change from 0 to 264192 23:13:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.329210] syz-executor.3: attempt to access beyond end of device [ 2401.329210] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.330765] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0xda3b, 0x5, 0x800}, 0x10) [ 2401.344757] syz-executor.3: attempt to access beyond end of device [ 2401.344757] loop3: rw=2049, sector=104, nr_sectors = 4 limit=40 [ 2401.346458] Buffer I/O error on dev loop3, logical block 26, lost async page write 23:13:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) [ 2401.353514] syz-executor.3: attempt to access beyond end of device [ 2401.353514] loop3: rw=2049, sector=108, nr_sectors = 4 limit=40 [ 2401.355052] Buffer I/O error on dev loop3, logical block 27, lost async page write [ 2401.362684] syz-executor.3: attempt to access beyond end of device [ 2401.362684] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.364358] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.380999] syz-executor.3: attempt to access beyond end of device [ 2401.380999] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.382687] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.421873] syz-executor.3: attempt to access beyond end of device [ 2401.421873] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.424442] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2401.441659] syz-executor.3: attempt to access beyond end of device [ 2401.441659] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.443302] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2401.477910] loop7: detected capacity change from 0 to 264192 23:13:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.519286] loop5: detected capacity change from 0 to 65536 23:13:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) ioctl(r0, 0x8, &(0x7f0000000280)="4077e693fd5afc76ff38536673d0b8b0a26ccf508422d2a1c0d093ee08af5503a0b09bdd33e6bdaeae76207abca7672858fd96c5cfe40e23693dbe50cf0dae269c92e8f075d84757d6c1d7f5e04f9ed2e0a5f828cef9832238e4ba52a82a44806e2b1c6a91ee871167b517612f23a7a39a46dc9422b2646dacbb1c13e800a3268465eea8252183c121c910ff7508f9207b5c60ffb27af5b3f03c27ea78a531006a7c2378353f31f914ab41def5f3b91e37e3c25dcd093dfd5c5905d9b1affb2aaf0d293c8dc78e5f5796c1859ad9820ed085732e11b98e7397d62a5a3b7e673fa215251e35a8839d15103bf034f24a5659e865a998db38191f3f083cf9bb16c3a04d9bea39723865345611eeb28fb5f1a8ee24e1bbe410dd84fbca11eac5a01504221d232b369d77d287f22b6bbe85524648a0d73669d058e5b60021306dc5eae0552ce532ebebd64c50864dfd96383d6a0b99b20b6abde2d1fe8c4e4b5b2e117c49689e55f9df7a6fd47ca15b6d22016a104694db15d0d68f0b85cdd544827f2eaa637fe70227ae37e3f27a93ce0b6ada1eda17dbb3640cd87c43a63ab771b69de784e2837373f647b2b661a8b0aded7ef5cdaa3b0c4da5998b7262581609bc8ad71fd4de465ccbfc93f71e550f1b0d0bc1418629eada4aa34332a219c2b973acbdc74006254771ea19cc10144dada2686a5b9fc0c3f8ffd8f9df3f082017a10c2a18b8fb96b196a94ca66abd08d3127a5d7d0d1499aa305147954a4e63adc217a4e9fc1854cd5f5113cda4dcaff81e2165e9a8ae70425635a23bfaae5a2a47b6bdb04a853472afad8fc54048753517602aef3caf3349f4148b53daab0d5f79b4509f960c08e0bd1a2465ff1e030bd07d4c99edc1279ba04b03c38450b170c3b105ee7a7a99c47e4daf8542743d6cda7cc46f3264f62591ebf634c28842f5a7fcc20f4ff0220a3aceb07124f5d98a525b961052db0796abda01045e8bec311b189b5f5f98c21db55bb0eca28600b9a303666b428742b4098718a7df1ef9359f73fa6a66a8adabfb14b342a7aa13e335d00cbd7abbfbd938ad110444b5454d181e8be391def2bd0dab1ad7d433c23e4e84cf87e6c138940ef0af25571ab9338220a39a0ad4a3f901c713cd2f23d1727e488bd3fbb5a7c864357b6d092343ef9a3347831e50320e586770936fecf9b1832f1c674825bd4e92eeb5ccbffc5f39d664fc1429aee8997d4b2679056961ff0767d8315a7b1de565b9e5364fc5bf1810f39b6fc4235e9e6d273e2f2e43d504b70b52dc25e34bf2a9344dd0b5af3a284d30a9aaa21e50cc71e171443158c07f5fb396751bb9ae05dc395affbd7f23ea069bc434654cbb81068057a260ccaded9b2c5f2f3b746899acc0e07dc2e7097fe74e66e65344aef0ebed79933bad2a640fbe4d11451a0cba8477585a7d5f1cc9811d54ef40ee2ff220ea6473acf46232cc0dec351e9d2c9856981d7d30ea3d7ec926a4a4652c1d0491a2e7ce7b6735c63e44612ac4f5aeee9c44f9b5e6f2dd441f3b0fccda20fd18b27e018b8156d1e657058fe644e24831e65146af9c90049abdae48d563ded654f7df952089c8d071b434e10929c25919ebc5e070c869172417ab51d54aaf487c3778868a12ffbddd3a75dd431e3565b4d4106238dd896d1dbb74bb9c625a56fa9f39fa8e192be551887720e55ad66744e1fd344bf03fb73934af522c82249a6b1f009e5a1dc08af4685335b1f68de75bcc0943dcf2123d709fa01bdaaad438e7e65b4523f20054e4fcacbe994a496a40dce2213b1b7da3d260d2ce9c026824478835e97c4f57ea6e25182da6cb4784dacd21eec3fe98267e4b676c4bcde1bbe1f30785c00330a3e0823091e72ba8e0278ba949c6ed759cd53938aec8d371a1aa025087a15ff9d513142cf98a88d6f935c6c4824640c7a4e905e2e820c4369f55dd00281ae35ecf521e8d352e969b73e545a704ec3a43fb529158ceecddcdbb5be0fe92109499db956ca27f4c8af177adb1b3e690ad56ee581181f8fc935043bd1b44a3d225d63af14dd8dc04c120a8e9e95505ba8b7965bbb5858c4994436fe59008773ab5523ebea10de1ada79f09ff240437ee1fddd99ae703c2fad4542c55820b38711fc816f47cf27d40bdf5c6e21c342cfbd32c28a114a55660b79b15db224e275293dcfd0285f647ea56b06d0080e234a7fb7342f10ae94d92f286c98a5a24c44f8fac86c1aaaa97a7c0367b68a1d48547a70daf8b2fe916e42bda99cc14053d847417d9ac94864af4e2e02b26215baa04017cc35730681b3978b7c81a1f2b372e3ba3fa71f6f21807bef1cef5eefa7e580420dd9878c3319b5bb4a004872c7580536f093a96f38393e18cbb57a0dab3790272defbd17c6f596c870a292bb33f67e77f3d465da0673ddedc822a0e61f43f632971f89f96ad3fe39874a0c87e758f825bea19f0978eb50bed5c5aab70793fa4cd76556af2e22c5cf01b4177ab8f4aeddcbb140fc547e02f3a090066e54316fa8de6d269378edf9b14f0651b17c24627b87db119348ab1361fdff7d9579a18924b1531b2d823c90ef01c8d011e3c52688567ab44409a431fdae196949e01b761cd1d2661c584427cf91e61c3e7f77748fbf1ac37ee82612d961a76af3541580217e93a7e63234d5d0627b45b0bd7f95ceceae86f5d0fe681fd92953b0eee35c7612145d9633de6e879d2c2fd73bb8188a8015fc80aaa5d443bdb2caed0f363f5f045427344bc56058336bea7277c1373d885f227ca06f72f66bcd1eeadf9802e8b68422945c12c747e315f2b377cd79e327c8f85d5c444db567eba47cd6bafd27ead7c72bf846c82c7483d583d800dd98062e2f8e93e6d1dd39dcdf55d3c3ca1dc35cc9508c1da3172f824440ab768ec357f33aa453c50ff43fdd9bb21d14dbf8c743336a67e1ff4a60470ff5092506ad109b73f9485ca6818f04192380c5c2f42204faf073a6f974b2f64a1cc0f208078c19918de06423842db3a95f0e3caa4709d06518e4e3afc43723dc4d688d434ff1a6f30c64d79fdcb07a79690b3d36d9eddf5d1bcef016d4a88edba005d7de24e22cbf0710bfe1d63e2749682ba628f38333048dfefd637dd07f031eb55687ace9cd9c9bd399e3631a95819522c7d8f362fb55b42047faef780dcfc25dc342328fd5f35414c7f1e42741f5aa99081f77bcaf553b77020f87c5a05e7bd4dbf1fdcb94370f55265f93e1ee8170cb78380b77b335f6742abf527fdc88134c523bbde23926dfd45a0b6b39d0786384a1a915d2d1ec957851fe973e3c65730b054a9aaa664cbc55b890c5001afe0788f361de02773aa21c0e1bb845a67ec2183fa39ea563014f6e869aaa04c9649e4e30aae664a2bd1a7bea15728a8f75158370a832121b73bdc3f8559dc3b4b945eee1a1f4a30cc47548f5c6a195808c6d3e21b59d44921356cff0fdc4fe01c8bbbb7be4bff75849175b387f83bc5a55c8ef9025e81e46b1fcb401d6c5254b6257344577f64081b3cec0a96a55ee50464f14c8869791e9e136b29857c418dbceaea5ba496456ed6c3722835f9f0057192152b1929f9db93fffd14b45bd4a809d5da2142af641e2c882c4b57e82ffdc610931f2a5b06aaa2fe665e7211b2f8ec767ab5f4ae24214cd82e2ab91ee812c83e0310e84d0eedb3f48e9b6075672e2b93c3e083d2562718244f32de50558e5aed618668b67fc31f5de98fddb558514fc5285e24d76eb7ec38d5d019dca2c590a0014dd0402d9af5710df8bde55402631823a6f797f755585db9fb332c5e4c3b9b26ae58eb29026f61cd1ff8745a5aea41d22f115d7924f82970dc975b0bb381e99bdb37370c998d6398b8eccad4755b963f599e73fb8736f96d053c61df90188dae47795699d439e18a660861ad057b9417c4b927476ff05a026d96d0042e47bc47683df3b8115e47ce714599db659bf34d78ba515d2a2372efd44c9263c5daf42b429c114c3ee8e9c1cb8288918716183d11ae608bbc05e502e50d69918ef51153afd91dac83568e25ae48fc92086d71ce8408641803416b64ae94dcd06c15e9e082ff5f8b9a970e76b42b1d6f3ea566a4e5072031b32287a0948405b321d3848b4c1902fa0124e97e7586cd79a94cc9ea1cdf2d6e4c644df62ce131c91a5a94c9774fa13e5c201eb94308842d0e2db32b5ccb39139dac9121afda7dcec2470cc4cd69fcb3a938ee11d98637a7a1fd66cca6899e81386a35213a0f1573cbc7b3ce4adcbf95b2c31239f35f199d2a24777cc867c387661b8e71e6d121bab5cc4f77321d8d7068a55d5a1249e5b121b9027406b33d683da3d4fb5669805e81c129ed50d63b36c949eeb30d419fe61aea4d3882c2001a687bd4f45871e16d96eb0864c67b287f29cf700e88624ff74d78df6cf8451e8c8246c9b65ba73901039b829ce8ae013fab033e80190a6985d942ef0b2332647eb723c459ce9d5b1a364f3985ce410dcad4b189e612a536fe9f984d3980fa3e2446d9531437946fe041e84fd9d369ed1b2140f3e957a2495ff5ae1d744c4aa6c956806f5097945e1287fc8f3a94134bfd32fa9520ff6533cf1d88706ae9a4d7b39fe10ebf2ab528fd3842feb39ce6b73877a9782ddf206417d6e4ea59c5e2d315ed107d0e6c1fbe65d8c64a25d5b491c6f7c7e9ad6a5b2b7ca5f79e7f888f96b269911539f16d5599330a55deab3dc0d6f5a03b8ce7213df6b91801838bc3d2c36dc2b7f4f06f202fffa79895b1d85bd4534a053bfcb91ee6e92b03cc1eedc2976f84d2dda559677d3e0ac047aaebfe2feac9153afbf4839e9df7e8fb57390c2b631ef213ccac6e2e5fce6d32a7347fa266a1e48fdc572fe3314f8c4b342fccc9d0b9b46ef37c37c4f3b1ecfd129da7c17ad4fe015d3426774db3b7d4e13782f05c8ca5a27d3372b674df8e9f73acd6416064f6247bb5049db8eea07441b444fe20b99a2aa4051854a2a113bc84ec9ed8d889608346f72fd24a012d1b92ca54039cc4a0a50e10e97f716aad61a967202f350bc9c017f14dcc938bf2a7f10ec72e7388e89887e729eec4b1bc6ce8854340ea57a3eec02915f79699d6fb684abff8412ac2769cfc9409bd6de64b5f4b58848780fbaa54090c4b53762461fd7560c2f0e1bbec0d1e74d4b239a235e9ac5d2b3dcddee4278b0a8837407ec6fae7543cd2bfc46ca47c530460c7e439d19370d57552d100546c938819ad06f0f4a74ee71e3b963d01bdc5c6ce39b452c65caef59941c73dd04373843dd31ee44330292908448b5aa996362a12d0509f82e3772ef39b0cbeace7b84cf864eab2d1d82a8d6424bec5c2d7cf3aecf2746fb54e7f19b0a9a0adcfda04b8ecf0db94b7c210e5b12b9e9818b5d771ba99db00857fe676438fadf747576fde2d8fdffaab4f3076b0a55c61557504d5c822c686ba3c0bfa2808a8e8fdbab64776341ba510bf38e322f817cea4e8264d39944d73e11f8236a2ba58a19600146beda8c6ac2d33604695048e68ca126fe4119e9bf9168e3b5789d98e2647399b19cc51b82bc5805ec7bd5207cf527c243e928c1f2a04bbbe4adc0e4cac8de2720d1d614a6ffda357de982c46c26f749b9230b242b8c9507ca231237693f720a4aef1d205d23f88f41e7a6b1e6c9637c0b18efd1ac8d0425f14f31d7e864e2c35d321fbcba7d98e0fda4ce6aed96b1a16181a669691e6517a902f49b49b1cf1ba008a793ea89e81184fd264179429079ff869d9eded315e838bbab02cfbcc3f2c2524726dbd3807704202e831") 23:13:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) mknodat$loop(r3, &(0x7f0000000180)='./file0\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xdb000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.607532] loop3: detected capacity change from 0 to 40 23:13:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2401.653571] syz-executor.3: attempt to access beyond end of device [ 2401.653571] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2401.655063] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2401.666758] syz-executor.3: attempt to access beyond end of device [ 2401.666758] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.668166] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2401.703126] syz-executor.3: attempt to access beyond end of device [ 2401.703126] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2401.704637] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2401.710766] loop5: detected capacity change from 0 to 98304 23:13:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x300000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:13:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0), 0xf, 0x20008001) 23:13:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:13:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:54 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file1\x00', 0x800000, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) 23:13:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xdc000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) mkdir(&(0x7f00000001c0)='./file1\x00', 0x41) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000180)) 23:13:54 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x3959, &(0x7f0000000000)={0x0, 0x4d28, 0x0, 0x0, 0x22e}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, 0x0, 0x9000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x80}, 0x1, {0x0, r2}}, 0xa53) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNGETFILTER(r0, 0x400454cd, 0x0) [ 2413.375375] loop5: detected capacity change from 0 to 131072 [ 2413.379309] loop7: detected capacity change from 0 to 264192 [ 2413.397846] loop3: detected capacity change from 0 to 40 23:13:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe6000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xce, 0x0, 0x0, 0x52, 0x0, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x20602, 0x0, 0x6, 0x3, 0x3, 0xff, 0x3, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r0, 0x0, 0x100000) r4 = pidfd_getfd(r2, r3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) 23:13:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000480)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c30ece88e1aa60254af5197cbfc8a32058e525726c4cbf60a52e9f6ec063292cb894c0c06a59c017347fd5f6a169ff41df53299892420efc301f71d459fbc5ca12989931acc6a4defc5f60bffe87d91ca5e67eb9fb7bea92031028ddde84108200bd86052d2b42e5c", 0x92}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000400)="a275031cc08c84d78dc215d30c5187004ee4a40716b14806a4eabe7918351c837f212ef183c5604c691616751d8a4ce840009db0dc2deab38f377ed55af2a1d55044f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x6a}], 0x3, 0x9e73, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) recvfrom(r2, &(0x7f0000000280)=""/207, 0xcf, 0x27a65a30c7739898, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x3, 0x4, {0xa, 0x4e23, 0x245a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}}}, 0x80) 23:13:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2413.471660] syz-executor.3: attempt to access beyond end of device [ 2413.471660] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2413.474389] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2413.485713] syz-executor.3: attempt to access beyond end of device [ 2413.485713] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2413.486715] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2413.491853] loop7: detected capacity change from 0 to 264192 [ 2413.513946] syz-executor.3: attempt to access beyond end of device [ 2413.513946] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2413.514931] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:13:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35c3, &(0x7f0000000300)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) sendfile(r2, r1, 0x0, 0x100000) [ 2413.548049] loop5: detected capacity change from 0 to 131712 23:13:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xea000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:13:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x3, 0x9, &(0x7f0000001800)=[{&(0x7f0000000300)="b4b9360ffb49971e195cd16a1c9e252852113eba2a0564997b3d7777c35b786ef85c2c63d62928c276de2e0bdcfa8107915ac4d25e0dc2228ea10860b147cbe34eab8ba3d10e2cb1f38e92f32253145e087526f64b7ca0c640c69430dfcdda8ee52007c469e7b3cad116c66151261f8e3e23610980ebb2c8dbdc9c4a355036283b5863f772306aec93227a02843bf9a15bb348e998b220f6fda46cd87bf08f6b4fb7e32509c3f3bbb11fda416ac1c28200a73c3eabde1665346fb0abd38ddee8e63413e8e568d2e7efe56b2f7e3de292f83b490f4369883e0b", 0xd9}, {&(0x7f0000000400)="58544d2dd943ff18ab812678261c76745599333f29fc8ecc76ace779102fee23f8d6daeb0ccb3e457fb60492f4b194b597651cc265899f62702160a1090895d4ee4e5c33c9b7de7e9676bfb3098a42e388f468ce9036af8825d066954246f3ad34bc0db732c7cf870342c8ddfb25ab9a1a80be83d5fb6941d28f472b23629e605a374e73d121808757da9c3169df297004953eb34098d299543811c751bbf0bb69c295f9a542d23ec09b2befaed59fa6e876ac5067bf58d44ab8cfcf5da2b4215e5e", 0xc2, 0x4}, {&(0x7f0000000500)="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", 0x1000, 0x9}, {&(0x7f0000001500)="33613d97d48f8296e387d25702ff76fbeae3528091d556db68d014e8f64bc40dd82c9d8b565ddf3904ae6d5742567d70b88c3e1d209e0f2de93da7c2b0da81cae19799bdf41884f758f18107fcd8c03e25b4def01ed4d27a7e17082b5ed9b2ff7cdb522f43c27d8d191cabde3a9a3b47da7f42f45b6d6233924eabe0c97307eb9ad4f40a4370f1a81dc0711f", 0x8c}, {&(0x7f0000000240)="fd9f3aa0521a0d17c8579c5267188b31b461cf24fcd8239a5ba0ba214b455def", 0x20, 0x7}, {&(0x7f00000015c0)="21c63b6297d2b9ba59cff14f04798dcd22909310b8a5011e701ac631d59477701943672543d0b7a082caf2c6b7be88ffcab36de5a3980dab255ffee0f5622796db89b0a61083314490e8adf9f2abc7bbd1d217b7d2f653835df1", 0x5a, 0x1}, {&(0x7f0000001640)="c539696e779652302f30de126b6bcd8c95dbdc4dd7334108c0525610dec939c94e17d6690d4c9c276877", 0x2a, 0x38c0000}, {&(0x7f0000001680)="4c2b59bc33385edb27e49beda158aa6ece7235f81002bef19c7f9cce14fdc77eb37000f89d8f92a4d663288344ab97f9e0137cab617d79440999f0bbecff778c6f0dd5cfe192f10b7dd82b87cd738903b6956e1f5cc730b8", 0x58, 0x1}, {&(0x7f0000001700)="69cd1c116894644f5bd5f5f21a85d90f0847837ab313041e55e0e42ce1ef1b892757e8dbc585fff8cd51b1f309c274dd9ae5cbb0e8401b9ac71a7c5477f4d895232b7bfe68d9e28a1faae02ca6e88bbdb7331de128db68a426f60e3d49f82f41300687c63a0cf45acec6b5b16419067e57d0480a3c195bff7133ff6a1bb461be5f1f4dfb2a3235a6a898979701e964cf56eb4a05d5ad250d47032823682a9ca8b6f7d5e2b7d90a0fe57e8a2a7678a5f1c7ba89c22d4cb6ce4262f93c9ded1853955121f3c6ce66de27c2b167921ad90aa0ab51fb56567dc8965343", 0xdb, 0x2}], 0x1000000, &(0x7f0000001900)={[{@fat=@dmask={'dmask', 0x3d, 0x80000001}}, {@fat=@fmask={'fmask', 0x3d, 0xad36}}, {@fat=@check_strict}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'root'}}, {@obj_role}, {@seclabel}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) openat(r4, &(0x7f0000001a00)='./file1\x00', 0x541280, 0x8) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2413.636655] loop3: detected capacity change from 0 to 40 [ 2413.640784] loop7: detected capacity change from 0 to 264192 [ 2413.704172] syz-executor.3: attempt to access beyond end of device [ 2413.704172] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2413.705772] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2413.748555] syz-executor.3: attempt to access beyond end of device [ 2413.748555] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2413.750385] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:14:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80101, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0x2b}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) 23:14:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:14:08 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "2c0a66e365e42f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={r0, r2, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r11 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r12, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @multicast1}, @qipcrtr, @nl=@proc}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r12, 0xf504, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:14:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="19110000000000000000010000218da1f7b18e11c2b642c4e805d20008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4008011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6e4, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x20004820) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x8000) r3 = openat(r2, &(0x7f0000001740)='./file0\x00', 0x200, 0x81) r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2752, 0x5, &(0x7f0000001580)=[{&(0x7f0000000280)="9f81dcf07868b3aa14f2d22d4fe6fda063890b1aee0e45391929b886d01736ae5b189ae43f676f667339bca1401bf0f3ef195b2eca3f59e45c32ef1438574b86c8bcf96c85b67c60afa3e2037a3ee5c9dcc622e8c517719102a8a87f875061c6c704291cebaec8d6e0cc3a0a34e8f3693503edd64a3978141290efff651eada5f957f551dffb2234a617f71a8e773fc7d547c9b3818f9374a2b8791a58b671c7a4e9b98bb9f7aaa8f25b3a701ca5ad097812e3c35d663662368e0cedf49c41cba2bb5fffd6872ed52327a1d9e73c63919afd9b3a625a80efb18e26e598f944fc31090213", 0xe4, 0x3}, {&(0x7f0000000380)="48b309a958e1109973e5b901b4d87b76530f88aa0281c5db23cc3095664ec6abdf8d47556484496a3e4904db5ea3298023086b4f7389980aac846e710d90010d5f478ee29a41db57648282bf0927b8cdf87953638dd10bf68bf27b5b60450cc32c227336836d2ab85dc7beef8a0c0534a50baf3fa075b095cbc4ebd45c7ad0d46d616c1ff539979b79a2439acd217a77a113c126cabbb077f0f4896685f1407aa38e9c9c8300ec", 0xa7, 0x1000}, {&(0x7f0000000440)="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", 0x1000, 0x1000}, {&(0x7f0000001440)="f14eb3237c3076a12c9b17aa1bfc2d241a92141524ec75992597558fa066459bcb1ddc2e1768e725f72feeda8b1aaebbab968d8f11ec9564432ce7b87b701a45763d13dd4d9b88ea1fb7846725a353a286863cf66c37e14b1fe60cd610d5637ca7c13ccaa907153d9e6e078562deae24a9d2f8a6247849797e434d1db53ae024672f5d601ded5d5ef32a7d21372e921ebf5ba73673d0e3e6a05b361c6d87272479addf7a4ee666adbb9bef54b2bcd301c196c1f239d1", 0xb6, 0x10000}, {&(0x7f0000001500)="a3764e725cf3f698c095ee25605129884d52fbc44391a931b3b448e4f3be6953992e9a96d6cbccb4e7be82da2333b911eed942a1efe2bbf139f8483b99c42fa8768077ffef56e86d49c9bd0eb0c48f6b4f7480d182599e739c56df068c22da8218611abd", 0x64, 0x20}], 0x4, &(0x7f0000001a80)=ANY=[@ANYRES64]) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x400902, 0x3e) lsetxattr$security_ima(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)=@sha1={0x1, "b3c23a29a01476c9829c35ebd5f018fda465dd87"}, 0x15, 0x6) r5 = openat(r3, &(0x7f0000001640)='./file2\x00', 0x101042, 0xc0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x1800) renameat(r5, &(0x7f0000001840)='./file2\x00', r6, &(0x7f0000001600)='./file2\x00') openat(r2, &(0x7f0000000000)='./file0\x00', 0x400, 0x40) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r7, &(0x7f0000000240), 0xf) 23:14:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf0ffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x4) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x5, 0x40) r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x1edfaed1744215d9, 0x10d) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:14:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) [ 2427.652430] loop5: detected capacity change from 0 to 163840 [ 2427.692020] loop3: detected capacity change from 0 to 40 23:14:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2427.723041] loop7: detected capacity change from 0 to 264192 [ 2427.729727] syz-executor.3: attempt to access beyond end of device [ 2427.729727] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.730690] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2427.761907] syz-executor.3: attempt to access beyond end of device [ 2427.761907] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2427.762999] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:14:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80101, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0x2b}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) [ 2427.784250] loop5: detected capacity change from 0 to 164480 23:14:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) read$char_usb(r3, &(0x7f0000000180)=""/114, 0x72) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:14:08 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x1000c10, &(0x7f0000000140)=ANY=[]) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x561c40, 0x50) chdir(&(0x7f00000000c0)='./file2\x00') write$vga_arbiter(r2, &(0x7f0000000240), 0xf) 23:14:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf52f0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:08 executing program 6: r0 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x6, 0x0, 0x0) r2 = fspick(r1, &(0x7f0000000040)='./file1\x00', 0x1) ioctl$FICLONE(r0, 0x40049409, r2) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x282000, 0x0) 23:14:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2427.893145] loop3: detected capacity change from 0 to 40 23:14:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') read$hiddev(r0, &(0x7f0000000400)=""/145, 0x91) [ 2427.947299] loop7: detected capacity change from 0 to 264192 23:14:08 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f0000000280)="04000000646f7366d8a02b00080101000440002000f801c3bb244125d72a94a5ecf485e5a8f5b48b13e8fa6d6f16f5db342de8962c34da59308dbca839dd43402c41e110c96a076d42b65eefadf1df64024e874179147cb5237f9c96894084e895126cf6c89ddff0d19994b018db2f5a695ca99a72e810763fad0ff3b15f3f1d1da42e6f7eb7132bb17ff35f11d68638e421b1105ee977b6ccdd24f09212767578ce082376221cd1d17167cc598bc75df15348dd3395e6a75ae8b38a6dc245a9c67310d9fc00fe228a4ab3e0b284", 0xce}, {0x0, 0x0, 0xc3}], 0x901410, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat2(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x101600, 0x61}, 0x18) r2 = openat(r1, &(0x7f00000000c0)='./file1\x00', 0x400, 0x0) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x82000, 0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r2, 0x3, 0x2, 0x8}) r5 = openat(r4, &(0x7f0000000400)='./file1\x00', 0x200000, 0x80) write$vga_arbiter(r5, &(0x7f0000000440)=@target={'target ', {'PCI:', 'f', ':', '15', ':', 'b', '.', '6'}}, 0xf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)) accept$unix(r6, &(0x7f0000000480)=@abs, &(0x7f0000000240)=0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r8, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004080) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000001c0)) 23:14:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2428.031229] syz-executor.3: attempt to access beyond end of device [ 2428.031229] loop3: rw=2049, sector=100, nr_sectors = 12 limit=40 [ 2428.055426] syz-executor.3: attempt to access beyond end of device [ 2428.055426] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2428.056244] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2428.076624] loop5: detected capacity change from 0 to 197248 [ 2428.098867] syz-executor.3: attempt to access beyond end of device [ 2428.098867] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2428.099712] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2428.117595] syz-executor.3: attempt to access beyond end of device [ 2428.117595] loop3: rw=2049, sector=104, nr_sectors = 4 limit=40 [ 2428.118525] Buffer I/O error on dev loop3, logical block 26, lost async page write [ 2428.119107] syz-executor.3: attempt to access beyond end of device [ 2428.119107] loop3: rw=2049, sector=108, nr_sectors = 4 limit=40 [ 2428.119884] Buffer I/O error on dev loop3, logical block 27, lost async page write [ 2428.120716] syz-executor.3: attempt to access beyond end of device [ 2428.120716] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2428.121535] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2428.128096] syz-executor.3: attempt to access beyond end of device [ 2428.128096] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2428.128956] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:14:20 executing program 4: pipe2(&(0x7f0000000000), 0x80000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:14:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xf9, 0x10000, 0x5, 0x33c, 0xfffffffffffffffe, 0x5, 0xff, 0x9, 0x0, 0x0, 0xffffffffffffff80, 0x25, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000300)={0x0, r3, "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", "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"}) ftruncate(r2, 0x1) perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:14:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) write(r3, &(0x7f0000000300)="0541c55e7c941e70f6b53ca4cb74d04e1f04de35efaf7cad7f3f7dc693a8bbf727e4a1864e741f72887ca5974bd54d8112d6d5ee27489faa67453b0c16a8e7683a732d3048f92861880303d308467f7d33dbc74f", 0x54) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:14:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:14:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:14:20 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "2c0a66e365e42f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={r1, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a7c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {r7}], 0x0, "d43c3a4f88c30a"}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r10 = socket$inet6(0xa, 0x5, 0x10000) sendfile(r9, r10, &(0x7f0000000000)=0x8, 0x81) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0x0, 0x7, 0x0, 0x8}) epoll_create(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000080)="ee", 0x1, 0xfff) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r12, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x1) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2440.151800] loop7: detected capacity change from 0 to 264192 [ 2440.184268] loop5: detected capacity change from 0 to 229376 [ 2440.187566] loop3: detected capacity change from 0 to 40 23:14:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240), 0xf) 23:14:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2440.307810] syz-executor.3: attempt to access beyond end of device [ 2440.307810] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2440.309542] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2440.343709] loop7: detected capacity change from 0 to 264192 [ 2440.346256] syz-executor.3: attempt to access beyond end of device [ 2440.346256] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 2440.347456] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 2440.361878] loop5: detected capacity change from 0 to 230016 [ 2440.373912] syz-executor.3: attempt to access beyond end of device [ 2440.373912] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2440.374888] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2440.377525] syz-executor.3: attempt to access beyond end of device [ 2440.377525] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2440.378707] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:14:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf9040000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x292e9) [ 2440.443175] loop3: detected capacity change from 0 to 40 23:14:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x501640, 0x1) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:14:21 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x1) pidfd_getfd(r1, r0, 0x0) dup3(r0, r1, 0x0) [ 2440.510792] syz-executor.3: attempt to access beyond end of device [ 2440.510792] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2440.512546] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2453.476668] loop7: detected capacity change from 0 to 264192 23:14:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:14:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x900000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:14:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x16e89f73, 0x4, &(0x7f0000000180)=[{&(0x7f00000000c0)="a2be38c79147419358a80e747947a2275340b08827175fca5f793fdb03668d4693c07f7aa5e6d14be5842e7d2181d9", 0x2f, 0xa}, {&(0x7f0000000280)="d9e7cbec12695078fa026f3a4256aec6d0e1c140ca67fe3658495bf4f66e8029d5263a969ed7e079bbec92a90d584e22432eacfa5e0f56e52bf09af6a99364e407cc6851194d7a758fc43804aedb36a9a2930533947c41ead388014facda026dc4e37a6f668a86ab0487edb0a7e682d5fa070fbb8db25fcb57f558e270d5763f56bd876fd1dce4cbbd5c8a43cffaf1004aad0a0d82ef8d385c96fd74896fb8dc1117918580e26dd17d04ef9a5bf247fd87a2e3a10ed96e6679625016538b8d8e83cff57b9a9dbb3764a6bb7ee02216bd9d2cd2ccb0dc81", 0xd7, 0x8}, {&(0x7f0000000380)="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", 0x1000, 0x6d}, {&(0x7f0000001380)="5e949bfed6ce7f64b7eb57b21a9da4ff6dc955d47c97a6b8c8f3802c5374c20efa56bb8ece684ae19c0f2483cfd3b3ea8349a965d5330473b54b564b260b6dbce482b1896bb0136427b619e94c5063cecf1973dd366e9a4abb056e35b1ed17ebf144226d144c2d9c7cd1f1720e23186f5c10d7e4800a37f6dd65d6ff283a98f141bb98f97bb2b5f2cbfc0d7bf0d0008295b7f7d70292e00272fb7287cee40781ecb633e3adc0fb8f9ac0a991805c8396ed0d737f6877872ff6b3fab8418142349fd5c04bfbf7174d0065a5721c516b394531689da3e1908d73fd3ec46731f74d77dba679c14f83638d94278af1b792f03752edf756d3685f", 0xf8, 0x6}], 0x2000, &(0x7f0000001540)={[{@user_xattr}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@bh}, {@dioread_lock}, {@nodelalloc}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_type}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x9) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:14:34 executing program 6: renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) openat(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="3ad066ca43b10d2a8f4456aa4d747d1acad422250c9ffc54ecf4ceda200e8fbbe318139cc5e88f622bec5df511781464f8e548be44db59ad802e50ee6587ee522b831ccb0b500680a809b80c83513a4052f2e4e05c0df9f59c", 0x59, 0x17b4}], 0x2, &(0x7f0000000480)={[{@dmode={'dmode', 0x3d, 0x2}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_lt={'euid<', r0}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}, {@uid_lt={'uid<', 0xee00}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, ')-\'-{'}}, {@obj_user}]}) syz_read_part_table(0xb605, 0x2, &(0x7f0000000040)=[{&(0x7f0000000280)="b947770d198fb35d92ddfec44a4e6a427d9ea5988afe7fc6d176e955c8c3c27e6997cbdac9e5581f7bf8ed684868fe0708f7e9b60573af4b6a9002995fd4c533de87f465c18dc59ca6802a6bfad672cd8050562a64eb10222ee35b2b6be2dcb160d9dfba1581c0c95360845d3593c383ce73bf18fcbfbdd4537932a91e64d7c917fd7780e910b72022988030a103a8cbd3e1dc44e03de9668d123faa", 0x9c, 0x8}, {&(0x7f0000000340)="c8fce7c31adc963d786b54d45a352ee86e15102a65a2a957cce9fd457a888136b762c74feeb92ef73dfbe47b1211ef6961d25dbb4e67d319ff194ff03e802badc05746b5b5e6f7a4ebdb8ab7f6c6a23afccf5710202127a48630302e51f31f3bd91fe5e26c548e5c6e3738b0e08cc64f3f90a36525ebc37afc759b9453bb12a44cf599651f0b42a20a464d59719847c17e956151839fb4a95fba0afedbef3225df1dda9b173853fdc90f877a870514a84135b7d2b4b7d38709f7b2787a289fa10f05a161a2c07f560bd22ffc7c40ade50913fb2023f74cfeb1819438d6de26c95fc2bacc2f22ee63abfd", 0xea, 0x98b}]) 23:14:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x81}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYRES16], 0x19e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000015c0), &(0x7f0000001600)={0x0, 0xfb, 0x6d, 0x4, 0x8, "da5d756fa3e6e2ac7b12b07bb1b8d0b3", "c7cc036438c6c9c946dfbc105a6f62292b828a337c6626951877916b9dea3e52fbfa158b3631bd1bb400da0e5e499b7537b962a01be5539d5fcdf0054497238ff9a0aa265c95de02ef4f19db763c47d91fc9abaa95f685f5"}, 0x6d, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) sendmsg$sock(r3, &(0x7f0000001580)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="e04442d16b1139e8f5400355e111ec3c5c37ad45422fd8cdd0c2540810db5703adaddb9b87656211fddaed088fa9878f67cb79093aab497df42a321f79266caf0cfa8aed49d9bea9e6497a9811f7a94904260f7c7f7d2483607c378e84dba3e12db34ae3179751b1c4430be71af7607656cb5472ed2e719fa8093658fa945cf06c97399047934871e61c", 0x8a}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="1e81631d3007f7e8a1d7701fc539f4a7cf67ffabd54228128e1d30c78741cf1513a6a9408febdba9592f4494a3b24c76d43140f8d178b33fc12c3a0dcda9d212e0b399d1e7f334146258b3bbaa011910f0265d1800f927dde5b99debed0b7d5118ad85d1fbc2101ebde8699eba64718caaca952e9672bcbb0db37011c4d9c6356df4748b3f0f390f5409c765738466c93707b6c36bc5023344983f561ec0d4812d1f2f5e8623a79b58b3d859767cf21bc2d97f56457cf5a9cd22dae3446279f0a45f7d1fa7cd15595340c5e4451812675a0e39b899052e81db3a", 0xda}], 0x3, &(0x7f00000014c0)=[@txtime={{0x18, 0x1, 0x3d, 0xa72}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8a}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0xc0}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001680)={0x1f, @none}, 0x8) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x41030) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:14:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00') [ 2453.514661] FAT-fs (loop3): bogus number of reserved sectors [ 2453.515501] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2453.554010] loop5: detected capacity change from 0 to 262144 23:14:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(&(0x7f0000000300), 0x0) close(r0) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) r2 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r2, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_RMID(r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f00802f0d29922869e034a8b34cf2030ef2d74034fb1bfc55efd8a9aeaf3e185fdb1a24ff1405", @ANYRESHEX=r4, @ANYBLOB="2c7709008e9f3d36a7ad95c5e3282fe441f39af8826cfa38b3fe20061ac13710c13112e0b74f931fa5236177b36fe1ffb52e24d097fa235b8198d209a77e5b6f99952bb854ef9bc625cfa5ba31e322f088187285ee07ea7a1d4a6c", @ANYRESHEX, @ANYBLOB="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"]) write$P9_RREAD(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x100b) 23:14:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:34 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0xffffffff}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x40103, 0xa2) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x80) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) 23:14:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) [ 2453.673052] loop7: detected capacity change from 0 to 264192 23:14:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2453.702146] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 2453.739959] loop5: detected capacity change from 0 to 262784 23:14:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8300000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfc2f0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2453.865875] loop5: detected capacity change from 0 to 264192 [ 2453.902670] loop7: detected capacity change from 0 to 264192 [ 2453.921755] loop3: detected capacity change from 0 to 40 [ 2454.001023] syz-executor.3: attempt to access beyond end of device [ 2454.001023] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2454.002764] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2454.008830] syz-executor.3: attempt to access beyond end of device [ 2454.008830] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2454.010497] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2454.035935] syz-executor.3: attempt to access beyond end of device [ 2454.035935] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2454.037586] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:14:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:14:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xa00000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:14:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000008aa9da040a008100000000004500005800000000002f9078e0000002e00000020420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000ebd0000000000000800655800000000d5c5fc19d38e97cfb6709684698878a093719c1ec793c804beea"], 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r2, r1, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101040, 0x0) write(r4, &(0x7f0000000080)="01", 0x41030) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r2, &(0x7f0000000000)={r4, r0, 0x2f}) 23:14:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/206, 0xce}], 0x7}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000002640)=[{&(0x7f0000001580)=""/130, 0x82}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000002680), 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002700)=""/141, 0x8d}], 0x1, &(0x7f0000002800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x2100, 0x0) openat(r1, &(0x7f0000002940)='./file1\x00', 0x440080, 0x4) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:14:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x40000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x292e9) 23:14:46 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 2465.541534] loop5: detected capacity change from 0 to 264192 [ 2465.541834] loop3: detected capacity change from 0 to 264192 [ 2465.604243] loop7: detected capacity change from 0 to 264192 23:14:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9050000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2465.695711] Process accounting resumed 23:14:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') read$hiddev(r0, &(0x7f0000000000)=""/122, 0x7a) pread64(r0, &(0x7f0000000080)=""/54, 0x36, 0x4) 23:14:46 executing program 4: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x100, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ec}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc78}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x2000040) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x2, 0x0) 23:14:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2465.805134] loop5: detected capacity change from 0 to 264192 23:14:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xa4, 0x40) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}, 0x1c) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000007180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x102, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) r9 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001600)={0x0, r6, "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", "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"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{&(0x7f0000002840)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000002880)='\t!', 0x2}, {0x0}], 0x2, &(0x7f00000071c0)=ANY=[@ANYBLOB=' \x00'], 0x88}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) [ 2465.943173] loop7: detected capacity change from 0 to 264192 23:14:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9300000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x50840, 0x182) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000001800000063bc1c865f39f39abb458413364047", @ANYRES32=r1, @ANYBLOB="0708000009000000000000003e53310083b2954fa353cae2d091"]) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000000c0)) [ 2466.076732] loop5: detected capacity change from 0 to 264192 [ 2466.386928] loop3: detected capacity change from 0 to 264192 [ 2478.728184] loop3: detected capacity change from 0 to 40 23:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9ad0100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xed7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x4, [0x5, 0x5, 0x5, 0xde, 0x5, 0x8]}) shmget(0x0, 0x3000, 0x0, &(0x7f0000ff1000/0x3000)=nil) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 23:14:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xb00000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:14:59 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x248, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc371}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfca0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x16d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaf}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @remote, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @empty, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x881, 0x24) write$vga_arbiter(r0, &(0x7f0000000240), 0xf) 23:14:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:14:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x9100, &(0x7f00000001c0)={0x100002, 0x82, 0x20000}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x110) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:14:59 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x0, r0) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, r0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f0000001300), 0x0, 0x0) 23:14:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2478.764618] loop5: detected capacity change from 0 to 264192 23:14:59 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x100000000}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe003}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x19b, 0x100, 0x7, 0x400}}, &(0x7f0000000140), 0x3000) 23:14:59 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2478.806314] loop7: detected capacity change from 0 to 264192 23:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2478.824427] syz-executor.3: attempt to access beyond end of device [ 2478.824427] loop3: rw=2049, sector=40, nr_sectors = 88 limit=40 [ 2478.855212] loop5: detected capacity change from 0 to 264192 23:14:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfff7ffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:14:59 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2478.973264] loop7: detected capacity change from 0 to 264192 23:14:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xed7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x4, [0x5, 0x5, 0x5, 0xde, 0x5, 0x8]}) shmget(0x0, 0x3000, 0x0, &(0x7f0000ff1000/0x3000)=nil) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 23:15:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:15:14 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000180)='[+\x00', &(0x7f00000001c0)='./file1\x00', r2) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:15:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) [ 2493.702113] loop5: detected capacity change from 0 to 264192 [ 2493.740326] loop3: detected capacity change from 0 to 40 23:15:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2493.755317] loop7: detected capacity change from 0 to 264192 23:15:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2493.796258] loop5: detected capacity change from 0 to 264192 [ 2493.802325] syz-executor.3: attempt to access beyond end of device [ 2493.802325] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2493.803990] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2493.869022] loop7: detected capacity change from 0 to 264192 [ 2493.903929] loop5: detected capacity change from 0 to 264192 [ 2493.928868] syz-executor.3: attempt to access beyond end of device [ 2493.928868] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2493.929731] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2493.932242] syz-executor.3: attempt to access beyond end of device [ 2493.932242] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2493.933142] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xed7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x4, [0x5, 0x5, 0x5, 0xde, 0x5, 0x8]}) shmget(0x0, 0x3000, 0x0, &(0x7f0000ff1000/0x3000)=nil) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) [ 2493.958163] syz-executor.3: attempt to access beyond end of device [ 2493.958163] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2493.959046] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffff7ff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2494.020058] loop7: detected capacity change from 0 to 264192 [ 2494.032594] loop5: detected capacity change from 0 to 264192 23:15:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={{r3, r4/1000+10000}, {0x77359400}}) openat(r2, &(0x7f0000000040)='./file1\x00', 0x22180, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x800000000, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:15:15 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2494.583968] loop3: detected capacity change from 0 to 40 [ 2494.585168] loop7: detected capacity change from 0 to 264192 [ 2494.613301] loop5: detected capacity change from 0 to 264192 23:15:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:15:15 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2494.659824] syz-executor.3: attempt to access beyond end of device [ 2494.659824] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2494.661617] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:15:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2494.688006] syz-executor.3: attempt to access beyond end of device [ 2494.688006] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2494.689715] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2494.725898] syz-executor.3: attempt to access beyond end of device [ 2494.725898] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2494.727491] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12300000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2494.744410] syz-executor.3: attempt to access beyond end of device [ 2494.744410] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2494.746004] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2494.773314] loop7: detected capacity change from 0 to 264192 [ 2494.782922] loop5: detected capacity change from 0 to 264192 23:15:15 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:15:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2010000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:15:28 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@fscache}, {@afid={'afid', 0x3d, 0xffffffffffffffff}}, {@msize}], [{@smackfsdef={'smackfsdef', 0x3d, '\'[:}@:{)/#(,,^]'}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@obj_type={'obj_type', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, '+.+[^-@'}}]}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x4, &(0x7f0000000500)=[{&(0x7f0000000300)="efd1f007b6ff292f89f1bc695df680b55278637bbca41bddfed0fd4611d72a07b9d3c334a532ebc989e32639f7ce7c350031b4e2854cadf6338972b91f1422f37c1b0b1c34f257e6786ecc01aa3963d22834031fe7e2b0d59fcb8724bae161b9c80171134c7db2704a81b2a2b825986c545ab0b778b5576754653807f1395e1d0c6448aecc91e8d3de366b1fa1458f02793ff37f", 0x94, 0x200}, {&(0x7f00000003c0)="7b775f8711d0bb08e654db2200c4b8bcdac0e0dbffcf9b1b2f12eaa1b44f3a6ca697641553caecbd69f931fb185503d9b9eb75ac130942b273fd6301a64da8b80ff15d4867ea6bdc7f0b205bedc8a7e8335c89c81351c5c801f8a7ead987a22c37f062cd0d9d484e743118cc5cc10bad3a7c6bf430a7e01378a2497d9345d52cb8bf5fb9c2eeda7b956b6a8080c86377126267db840161cb33e4ee1864b65cf0cf417a58ac5f494c023794642c0578b9e0af73c3613e", 0xb6, 0x100}, {&(0x7f0000000480)="60c0add175cbfc8f0b1c309481be7a91fc7eaeef05edfe48e3fea33b1dde9e606f96b9112a340beb62291e2bc45fb31770caf912008187b8bf1a52e67526dba0789b48c1914e305e5d38f440727e4fa305f23d5f72f0b3354ee7a9c41361598bf370f3f86c5c0d56a3c6ee53ce3fa030c37a11e70e2b876b", 0x78}, {&(0x7f0000000240)="02553dd18d09ee0bbc2eb7a170db5aca8005cfe0e6565415792a44c32f131f8da1bb9b", 0x23, 0x8}], 0x10c00, &(0x7f0000000580)={[{@stripe={'stripe', 0x3d, 0x258ece15}}], [{@seclabel}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_appraise}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0x0}}, './file1\x00'}) fchown(0xffffffffffffffff, 0x0, r6) connect$bt_sco(r5, &(0x7f0000000200), 0x8) shutdown(r5, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000780)=0x5) 23:15:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x13300000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$ptp(r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000004f740)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r7}], 0x0, "12f372f304289a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000680)={r14, r11, "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", "aec814174f0256858d4a4164daf7fbf491c67926fb04b544fea2d337e5c37c51925d364291b53218441711cfe69e560788c40f354f4cc0156e6fc6f25110a03532e9fea98ede07a9ff29a8e7fa24e6a7def0c267aff0471f0c06dea093a13b2ad74c49f2e55606327d048cc5ca0784bdbc8c112dd4e7c7b1840bf478ad62553d08d254923fa895f5e692f428c642dd82c90f991086bfa81a6c506ab3ef0329aff57e6340cca6d3546215e6551af6123edfecd2701ff5ff272b7e62342bc53d8aace937e003f94d33bc83b41b9039d5cc82e1bcd24def224b1f0a60c8d4879fd966cb72eacbaa4c065b7278986325fa0178ecf83a840c8e85e08d28c48ec3167fed6d2cf2f2f9dfe6602696010675383fde6a8d0588f8419519d60cc37541b3c4bc744ed369c82ad68e43089bddb4b63eabeb4c9eea26a4d988337f1600a941fc6f302b6ea8d2ecadab5611f54ef30810c7a9cee3d52562a23da683d2f6de9bd9f5fe3f2ddfcc091ba98848adef9b030ad4b01a0bb24a5f20a96837d8659bba6973766a0feb707530fa49d74039c513c89fc342a3e86de466f59a70d950dcd3a8b7945b756a2bb6339d56dd7228f854165df182252269b65ff46de05b0f5ac5bd186d88d4ca1c5ca57096e72b82c4a43e517b215b4e2b435ab1d1218df5107277c393ab07266b9c42e839cc58791c39cca1daa8623229d0b2f155df7080b5b35f8a78e8dc5a8318654e9d19c14d6711143cfc950a6e5abeff22d6d2f9a07e4dd62659a983b01af34a4b7f90493b9c29c8ad18bc76195afa2545e6124e452557e36e554e5c9d7b5fdbdb6f11719fd1e786f9e29c976b05f53babfd471d31e4dbb7d8dcc11ee52baaf0ec7e0a5ec9f2d22c9f6e243b31951108be7dbf2e706bec96670af2acc1e563a338ba381e77bca2422e82abb95bac85e49fc03b2951dafa45b29d6dd081ef17e48f9e826afd3683b19979fc0a65b24ac3397bf6701364222b62a7e3677b289b34648133ab6393178149299b5cbc91cde1b1650e948dd702ad10a60d6003e4212aeca6fae8cfd2923c875ca331c6ce86099352edbc5ca3cb2f4a051a7409057d33c7d7abf96692f3924c5de808d25aab44e3b1d145868af1bdfd73dc9904bb8e7b83d7f16232754bcfb7e32bf673d3661355ac4864d0da7590942002882165605697bd7e76743f26cfcf668fd2692c013f6803339f34b651d5f325d48e904aec556141ff4d926a24ba2166e14a1626c1c4c6f9427f9f7db68ea0ee428e035c6b9f4cc6189ce226aa9881b3a9ddd265beebd7b8d138c7b8b8127259f1538b475a303bb1b68a1c59eac2ef808142f6e492548a13707848980f79afd8a7dbd76fcef44b8229e50c166ef7dc7db296b1db49449c9b5a99461dfd8bf8b43887cc31c1c82a88a54859a1a0a1705349f6cde84a17c45d804ac4a37b49d0e2d10e5c7d02235f70c516b5b0ba2920cd2a3cddc06572a1a833ba542c500c00d432b2242fff1cdacadc530a2ac943381fce2bc448163f4da564e673a5ed0e6262ea52620f154e4c2205c1810aa7176a3c8335b1f21852ab772dfe2b279fb147b743ea5681924fdd82c5800745ca8dd2883043e94f4a0e2c333b9fccdf404a14cbea92640a710d4457427d1cc84664a75d655ce8fe81b0855e155dc23a0a19edcf0f475931409a5be829710aaf3fb1f40ff05c598182052e82cee86ff810c39fb09e676ea0d47fd39571396b1bc4afe7d414d870e8778c710ab19951f9acd601cf29747c147f81ffd5b9d155e95f2b0ea36e93335116618966b1f62254e7523fdd23cae5e5ccd9b646c87d81485414c3cced36c0a7403c9f55e1d87ad7db1dd00434a66579f4c9f3d453964d6cad9a359b31ee44f210b181e85f6a2b0cd8d9e9457fd20fe67203e6478d34b905e1746b0693b121e818a9a139df61654d3af21c84b18c3a2e25e02a567194911fb9eb0e30c0154401c57600aec84c0bf902c800ae2134ff77cacde51e966d1517aef72d40c25d65cb1dc7b98cbc13589158da84aae586c14954196e03d5899de80ad97f7da279735a71a99d8e885e275b8432d7c99e81a646d7e4462dcf615293b3322981fab58e30649b78151510b622aa659d2a621735dc88c35289a693c0fb912e89aaacfbd93b005639d10d818a0dfbd284fff7fadb8d82511240f1ce500d16d6d3c02019af783956ed26bf111691c104ed6aa8c5a68f9b8bbfc83bedefe8ceb89a839be681aebd90644d6e9ab34af7a54e6d22fe2005ba3b392631b80bccae482c323b4dba5afe3761669252d7354eb1573d14f02e230c7819664f94111f765bbf46c18e4c9fa1c7895d10c5c1e22bb9c040e3e444441da041dd02d277d43c3be8cfdae67d16b71772490509130326115a1892246d7b1a69e9be4e3d1effa8c31707df9778da9bff919c0200b03c9a5191c367f8fa05aa4e2c630f90a4f2e856ba070c87d0f154031782cd9b4193dec7fe14135fbfff3da9f2bb9331d9fd8651c202864b15b78c0e2267e668ceca157efe99f2052d1ad55b3f63421831c9bff0e1755c517b5d93b0d3e12860c661d0b58671278eba83f80cec5e602b2cdb40a9d8014319ae1d1b0c9570628ce79cbed087c4f717fa0030bd661e1fc38313750549bc015650366644a2eb1d540cf31fed2550fd21328734b47d29e4139a2c4a117e4574d5976e60accdfa3fc96bed3d465ff3ec26084069949cdcf35d316e7c6055f22f27d655f59f89a0472edf4fae258067a2eacdef199d5e007dbf0ef4789217eec9b30d8624bba3c920b38a58f1c548c8941ac69ebbc5560231941f6928a88151d8acfac07cabfcf4af1a89a7bbe905dc3c0cfe9abe3a22aef0e3b3f08b0c08c071792adcc7f735aecfecc231d70bfba88948946ad1fb11f7f08451d8a495fca11265609ec373e9c8c16973b5fb96b97ff703975342d9dea3427bf47a94fa368127b6be1f1e7022016f174dd640ded33b1979f536e06e953c04238878cb487b33c0d152fb57698e749fa9d17ee5fa0440b6dce4d287798493ba6d6122c9f3ae466aac9a6bde21da3d3afba45c30387c260a1a6432fa1f7509e82eb23aa5d8cafad96ed5c5d1cde20a76a6a82914cace77f04f2c91902fc5ba5853fb8d97db58bcb55c44cb267a04f15255f45da6cfcf2cdef7d719fe3e22f35d31d301b3b10b0957e0b96765442366c8f2764a23e8e964361df01860bd88ffc726eec6e2a3b9e0c2b922b6b2318327b703e6da01e5249ae5dff54546b1b683ecedec6bf5ef13db3f01223069629714f8a1c0eb29365864990d6b0becf0d6f958655b5c0cb69ec607c7f4eb57595cab3f830fd241920e4ae0e6b5fcc8112cb6324914d32803e159862f30824403d67ca5d2ed9df7cae16d39edeb275697ccd08cd072906ec7706191323a77835b5aadf380ce31d85064d6d4252f9278ca803b6867d6e505093ac040b837803f908fd795cfcb710b2d9cc112d46f058337ec01cdfaba1d2e5e86d0ce408593d5331ae20e64461a7abd2c55dee7e4787fa4a3e804ed813f6f24144402766637c6cc3961bdc81f104713a4f8305f2022fc012016c4fa61f2ab78db188c0c72e5b7e95dd02ea6759ceb630b5bca90a83b53113101e6c6f75e6c19d4ee4ef2651901ea7ad6377646de303db8a7f5059fddf5bf64c8a9170ae894ab88311094cee7b6e9e58513e10d17461293dad20562b22579074c8ff3739adf4a527fc40bc37cf3fec0fba2f57becdf23ac6aa21b9a017d56fac700f7aa9233f36bf4d39a8caf9a405f8e3a00866e272847676428857c5161ff9d29e8fb622b0fd18c8c93454e039acbf052b53d17c4d845533935ef18eed4cc93fa1e4896b987605c9264cfc66f11ab8cab9e789f18339e3dadb2130d0d5ac6d4507087100d290396027953c29a5ae2dee3a94ab177eb4b1e5e66a961563bd521906f03c5e9120e7e670625f2f0de0c97bd6c2375bd7aefcb67b89e03157ca4b52329330c784320c0b80e5bcfb658028456db239e2e3c45b2e6260c645823ddd7080b77fa8f3c461087af6c042119262cba1f622dd17e10be4e00ac2fa53ee9acac02a8efba00f25694f5bb14e4a9a1bf4f76cd758003e5375fb9500a2ea981ace98e6070dbf2ffeb6cc44b0463156bf268c1e3d4c88b5804023fa5799f7039b7f4965d9325c5ee4e2f5814dcd6ad0d3e2038ba3cf43a5ab17242900d603051fe396789651ba532cb836ab8341bc5517266e8bc40609bf49a4a7e8c265d3ce2385d1d2fe7678894306fe82996686707ba551ea1606072ffd8bc310bcb8c1a964a45ba8e4fbbb1ac8bd796e7e8f1e6136bf15be10ff285d32053d60ba829dde0da91778a52d3444bbe0ced4c73362f5fb21a6944aecaa499fea79c87db735a410772d81b93c3428047294d5dd23091859ba0271cbf0d34347770a8d26806422fea261b120ea5ac979ccbc1e66318020f1752219f9352c55bbce63d310f2615ab878647d43a8e54f2332ac5d252f4a880b923306d90ad9499f4f10ba241c3c8dd140a73a9788051bc6898d0275b6284f64d9901ada3a5b89fc154910b3a56def99d3294d39a8747ba1ebd35bf840c202bf3f3b4536889c710d5e71d6b368a168c516a117bef34cb90c834d62e2766bdca1d38e38c560fafeff959f5657bf8670531a25080cd7032fe8c6b01800f66580be90083d152280005e5c1c7aed6bdbe790d8a3af29a9653e16685229c7bbad5698b780a17a2857281f8701ffa59cdfc04af22a27a52d7cd3b9b78fb5e2136553825b0bc8a927f0e61dfaed2aeb40d06b2150aa3ed05d11cb29b7d959ac24712daec574a91d0899578fe5569c4fbdfbdb83240852e17d7738514cb420ce767289a0263aae50276d407d85a37292a75d27f88c49b2afcccf4a420a45e10c45aeaf598346da07bf6910f0b6944ffcc9a4b31a24f41f068a3980e34b610a6efe3f79e4913ff0a539d6c7f19d70d3fed2d8dcc158253242f5b89b37c993221cf4bf609f4134de5437b8cd09208da4fce98a074beb39577b11bfefe1f516ed23b2806a625695d8d7507cbe471cefb0fe03fb75644508ae9ecf85bcc894f7afbca9b0e31e0f6467a53368bee2ce51249fab79d0dc6a9a8f27f2b1aa3f1e09ab662c1d5b75acec403dac5d7a5f7cd83c6eb3ccca07ddf3f0c45442b9a397596ba9f9b2071a471ecb3df8aa53c0672893ec39f28ed6c64e19c6514d45484eba2ddfb2b3f6fd39c8434f8bb71712db1521d8041a92f0cda7e3da845f71c3025b8095abcfb6d1fafe05a3830016b14c976c7170789d51cb4477b46288e2ddbcc50a718cfa96283c4eed5432eff55f571e720cd058f7f2490e83a98a78f9faadeaa5f3495ae47ef45efe4d2c3f47ea4883c73e597290a1367bcc5669438"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "63ceced1c7757e"}) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r16, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}]) r17 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7f}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r17, 0x0, 0x10000027f) clock_gettime(0x0, &(0x7f0000000240)) [ 2508.217527] loop3: detected capacity change from 0 to 2 [ 2508.218666] ext4: Unknown parameter 'obj_user' [ 2508.224194] loop5: detected capacity change from 0 to 264192 [ 2508.264865] loop7: detected capacity change from 0 to 264192 23:15:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:28 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2508.359653] loop5: detected capacity change from 0 to 264192 23:15:29 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:29 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:29 executing program 6: prlimit64(0x0, 0xf, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301043, 0x24) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x6090, r0, 0x0) [ 2508.454603] loop7: detected capacity change from 0 to 264192 [ 2509.073129] loop3: detected capacity change from 0 to 2 [ 2509.076741] ext4: Unknown parameter 'obj_user' 23:15:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:15:42 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1c300000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2522.340013] 9pnet_fd: Insufficient options for proto=fd 23:15:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x4, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) 23:15:43 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="061100c53aac8378742c00"]) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000400)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[r2, r1, 0xffffffffffffffff, r5, r2]}, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x28, 0x31, 0xf7, 0xd6, 0x0, 0x3, 0x10, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xac, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x400, 0x3, 0x7, 0x2, 0x5, 0x6, 0x2, 0x0, 0x80, 0x0, 0x8}, r6, 0xa, r0, 0x459020bbf54635cc) 23:15:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4a02000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2522.375236] loop7: detected capacity change from 0 to 264192 23:15:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) setxattr$incfs_id(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2522.381309] loop5: detected capacity change from 0 to 264192 [ 2522.396502] loop3: detected capacity change from 0 to 40 [ 2522.437653] syz-executor.3: attempt to access beyond end of device [ 2522.437653] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2522.439418] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:15:43 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0xc001, 0x4) [ 2522.452414] syz-executor.3: attempt to access beyond end of device [ 2522.452414] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2522.453991] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2522.488023] nfs: Unknown parameter '' [ 2522.499105] syz-executor.3: attempt to access beyond end of device [ 2522.499105] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2522.500753] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r1, 0xfffffffffffffffb, 0x6000000000, 0x7}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file2\x00', 0x129703, 0x102) write(r4, &(0x7f0000000080)="01", 0x292e9) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x9, 0x0, 0xc1, 0x1, 0x0, 0x1d, 0x25ab, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x120, 0x7, 0x9, 0x5, 0x0, 0x9, 0x5, 0x0, 0x6, 0x0, 0x4a97}, r5, 0x10, r1, 0x5) [ 2522.503335] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 2523.642408] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 2523.663445] loop5: detected capacity change from 0 to 264192 [ 2523.665274] nfs: Unknown parameter '' [ 2523.851460] loop7: detected capacity change from 0 to 264192 [ 2523.860428] loop3: detected capacity change from 0 to 40 [ 2523.899328] syz-executor.3: attempt to access beyond end of device [ 2523.899328] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2523.900603] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2523.970214] syz-executor.3: attempt to access beyond end of device [ 2523.970214] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2523.973184] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2524.001046] syz-executor.3: attempt to access beyond end of device [ 2524.001046] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2524.002300] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2524.005529] syz-executor.3: attempt to access beyond end of device [ 2524.005529] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2524.006729] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:15:57 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:15:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:15:57 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000e801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x5f0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'U-', 0x8}, 0x16, 0x4) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000001c0)={0x40, 0x9, 0x6}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x80, 0x2, 0x5, 0x0, 0xc8e, 0x40050, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0xa}, 0x14d80, 0x8001, 0x3, 0x3, 0x6, 0xfffffe00, 0x8, 0x0, 0x95f, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) 23:15:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:57 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="061100c53aac8378742c00"]) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000400)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[r2, r1, 0xffffffffffffffff, r5, r2]}, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x28, 0x31, 0xf7, 0xd6, 0x0, 0x3, 0x10, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xac, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x400, 0x3, 0x7, 0x2, 0x5, 0x6, 0x2, 0x0, 0x80, 0x0, 0x8}, r6, 0xa, r0, 0x459020bbf54635cc) [ 2536.876301] 9pnet_fd: Insufficient options for proto=fd 23:15:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x69667b09}]}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xcf, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0xff}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xe1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}]}, 0x38}}, 0x0) 23:15:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffff0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8cffffff00000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2536.898099] loop5: detected capacity change from 0 to 264192 [ 2536.913807] loop7: detected capacity change from 0 to 264192 [ 2536.917542] loop3: detected capacity change from 0 to 40 [ 2536.926459] FAT-fs (loop3): invalid media value (0xe8) [ 2536.927244] FAT-fs (loop3): Can't find a valid FAT filesystem 23:15:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:15:57 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2537.048570] loop7: detected capacity change from 0 to 264192 [ 2537.160244] nfs: Unknown parameter '' [ 2537.744305] loop3: detected capacity change from 0 to 40 [ 2537.749652] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 23:16:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000180)='./file0/file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:16:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xf100000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:16:09 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:09 executing program 6: set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x100000001) syz_open_dev$tty20(0xc, 0x4, 0x1) 23:16:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:16:09 executing program 4: perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1'}, 0xb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x7, 0x12, 0x9, 0x0, 0x6, 0x80080, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xe02b, 0xb5}, 0x1, 0xe6, 0x1, 0x6, 0x47cceee8, 0x2, 0x9, 0x0, 0x21, 0x0, 0x81}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file1/file0', [{0x20, '#! '}, {}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '$'}, {0x20, '#! '}, {0x20, '#! '}], 0xa, "31346d7d04bd60957bc3eb5f61e3c8a92f959a8c839c1f8086e3f00a4a03705cdb71181aaa1a71b65422311381230f36b7176459ebd2c6a6f4351d6891df66cab056fa4f48b035b4583dc0f1f7fddf27819e20209fee536124b6f4e63459332d1fc9d8a3ddd9940f4ad4a529a98b27997a0ef92b381bf55a4f73f4f48d247856d5c855975bc999b44cf8501dc2bd1a9683fc831a647969d7d339bb9fe9b88e9e2a7fc727e0d2df924100419e73e1a00ae8cf71802f441acd384b87df1747ace61eaf4dd67b1d908da32327bbfcf2c392fb8fb2be115f33aaf4d4c1c2ae79af3512fb75c44052ed1523580c0db2044f343ff6"}, 0x126) write(r1, &(0x7f0000000200)='E', 0x140000) [ 2549.132418] loop5: detected capacity change from 0 to 264192 [ 2549.141508] loop3: detected capacity change from 0 to 40 [ 2549.147913] loop7: detected capacity change from 0 to 264192 [ 2549.168521] 9pnet_fd: Insufficient options for proto=fd 23:16:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x27000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:09 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x200) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2549.227768] loop5: detected capacity change from 0 to 264192 23:16:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:09 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2549.299304] loop7: detected capacity change from 0 to 264192 23:16:09 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20800, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@version_9p2000}, {@uname={'uname', 0x3d, 'ext3\x00'}}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, ')+'}}, {@smackfstransmute}]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa8, &(0x7f0000000180)=ANY=[@ANYBLOB="7374726970653d3078303030303030303030303030302dea1b0a4e"]) creat(&(0x7f0000000100)='./file0\x00', 0x8) [ 2549.323421] syz-executor.3: attempt to access beyond end of device [ 2549.323421] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2549.325234] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:16:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013a00)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={0x11b600, 0x181, 0xb}, 0x18) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x40) 23:16:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x28000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2549.384879] syz-executor.3: attempt to access beyond end of device [ 2549.384879] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2549.386577] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2549.396943] loop7: detected capacity change from 0 to 264192 23:16:22 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xf6ffffff00000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:16:22 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x200) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:16:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) [ 2561.555720] loop3: detected capacity change from 0 to 40 [ 2561.559217] 9pnet_fd: Insufficient options for proto=fd 23:16:22 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x501242, 0x8) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:16:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x280080, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x84) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000028df7e890f0000000000090000000000000000000800", @ANYRES32=r1], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2561.569650] loop7: detected capacity change from 0 to 264192 [ 2561.570005] loop5: detected capacity change from 0 to 264192 [ 2561.601632] syz-executor.3: attempt to access beyond end of device [ 2561.601632] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2561.602575] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:16:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:22 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2561.627642] syz-executor.3: attempt to access beyond end of device [ 2561.627642] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2561.628536] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2561.660096] loop7: detected capacity change from 0 to 264192 23:16:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, r3, 0x4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) write(r4, &(0x7f0000000080)="01", 0x292e9) open(&(0x7f0000000180)='.\x00', 0x32440, 0xc6) 23:16:22 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x27934) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x4000, &(0x7f0000000200)=ANY=[@ANYRES16=0x0]) chdir(&(0x7f00000001c0)='./file1\x00') setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0xffff, 0x8000}, {0x1f, 0x4}]}, 0x18, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000140)='E', 0x1) 23:16:22 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x200) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:16:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2561.716859] loop3: detected capacity change from 0 to 40 [ 2561.718279] loop5: detected capacity change from 0 to 264192 [ 2561.761950] loop7: detected capacity change from 0 to 264192 [ 2561.829027] syz-executor.3: attempt to access beyond end of device [ 2561.829027] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2561.829979] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2561.856048] syz-executor.3: attempt to access beyond end of device [ 2561.856048] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2561.856951] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.133125] loop3: detected capacity change from 0 to 40 23:16:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xffff000000000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:16:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:16:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) r1 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x4, 0x9, 0x5, 0x0, 0x2, 0x823a9, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x101}, 0x12000, 0xdf4, 0x3, 0x0, 0xca, 0x7fffffff, 0x5, 0x0, 0x8001, 0x0, 0x1}, r0, 0x0, r1, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:35 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:35 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x200) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:16:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2575.189883] syz-executor.3: attempt to access beyond end of device [ 2575.189883] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2575.191642] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2575.194050] 9pnet_fd: Insufficient options for proto=fd [ 2575.213816] syz-executor.3: attempt to access beyond end of device [ 2575.213816] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.215567] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.223452] loop7: detected capacity change from 0 to 264192 23:16:35 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x200) [ 2575.249818] loop5: detected capacity change from 0 to 264192 [ 2575.261278] syz-executor.3: attempt to access beyond end of device [ 2575.261278] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.262228] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:16:35 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:35 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) 23:16:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) recvfrom$unix(r1, &(0x7f0000000440)=""/3, 0x3, 0x10160, &(0x7f0000000480)=@file={0x1, './file2\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x42) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000427bd7000fbdbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800a00000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x4041) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000400)={0x0, 0xb449770dab0ec58a, 0x9, 0x9}) write(r6, &(0x7f0000000080)="01", 0x292e9) 23:16:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) 23:16:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2575.331284] loop3: detected capacity change from 0 to 40 23:16:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x30010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2575.359999] syz-executor.3: attempt to access beyond end of device [ 2575.359999] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.360964] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.384827] syz-executor.3: attempt to access beyond end of device [ 2575.384827] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.386366] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.409915] syz-executor.3: attempt to access beyond end of device [ 2575.409915] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.410983] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.432709] syz-executor.3: attempt to access beyond end of device [ 2575.432709] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.433576] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.439016] loop5: detected capacity change from 0 to 264192 [ 2575.443607] syz-executor.3: attempt to access beyond end of device [ 2575.443607] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.444403] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2575.447542] loop7: detected capacity change from 0 to 264192 [ 2575.449916] syz-executor.3: attempt to access beyond end of device [ 2575.449916] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2575.450771] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:16:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xffffffff00000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:16:50 executing program 4: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x5, 0x8, 0x1) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x1, 0x7f, 0x0) 23:16:50 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:16:50 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:16:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x32010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x40, 0x81, 0x7, 0x63, 0x0, 0x67, 0x10, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x7fff, 0x2}, 0x2, 0x9, 0x81, 0x6, 0x1, 0x4, 0x60a, 0x0, 0x5, 0x0, 0x3ff}, r4, 0xf, r3, 0x8) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000240)='./file1\x00', 0x100, 0x12) sendfile(r2, r1, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:16:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:50 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0xaf, 0xa1, 0x0, 0x0, 0x5dc2, 0x72406, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfc000000, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x4000, 0x6, 0x0, 0x3, 0x7498d41e, 0xffffffff, 0xfffd, 0x0, 0x1f, 0x0, 0x4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000004c00)={0x180a03300, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) fcntl$setstatus(r0, 0x4, 0x0) [ 2589.973650] loop7: detected capacity change from 0 to 264192 23:16:50 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2589.990225] loop5: detected capacity change from 0 to 264192 [ 2589.994312] 9pnet_fd: Insufficient options for proto=fd [ 2589.999747] loop3: detected capacity change from 0 to 40 23:16:50 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) 23:16:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x34840000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:16:50 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:16:50 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) shmctl$SHM_LOCK(0x0, 0xb) [ 2590.118921] loop7: detected capacity change from 0 to 264192 [ 2590.123031] loop5: detected capacity change from 0 to 264192 23:16:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2590.167710] syz-executor.3: attempt to access beyond end of device [ 2590.167710] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2590.169282] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2590.194383] loop7: detected capacity change from 0 to 264192 [ 2590.242684] syz-executor.3: attempt to access beyond end of device [ 2590.242684] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2590.245854] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2590.285208] syz-executor.3: attempt to access beyond end of device [ 2590.285208] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2590.286796] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:17:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:17:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:17:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:06 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000480)={0x0, 0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x181801, 0x5) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f0000000240)=""/226, 0x20000258) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@mcast1, @in=@initdev}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) 23:17:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:17:06 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2605.691089] loop7: detected capacity change from 0 to 264192 23:17:06 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7ab92) [ 2605.708585] loop5: detected capacity change from 0 to 264192 [ 2605.718304] loop3: detected capacity change from 0 to 40 23:17:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:17:06 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:06 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) [ 2605.755298] 9pnet_fd: Insufficient options for proto=fd 23:17:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2605.864482] syz-executor.3: attempt to access beyond end of device [ 2605.864482] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2605.865371] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2605.875836] loop5: detected capacity change from 0 to 264192 [ 2605.883089] loop7: detected capacity change from 0 to 264192 23:17:06 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 23:17:06 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) close(0xffffffffffffffff) [ 2605.913855] syz-executor.3: attempt to access beyond end of device [ 2605.913855] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2605.914739] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2605.923222] syz-executor.3: attempt to access beyond end of device [ 2605.923222] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2605.925048] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2606.496169] 9pnet_fd: Insufficient options for proto=fd 23:17:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, 0x0, 0x0) 23:17:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x7, 0x8, 0x1a2, &(0x7f0000000040)}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2b) ioctl$KIOCSOUND(r0, 0x4b46, 0x0) 23:17:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:17:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) accept4(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:17:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:18 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000200)=""/243, 0xf3}, &(0x7f0000000100)=0x40) 23:17:18 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, 0x0, 0x0) [ 2618.256334] loop3: detected capacity change from 0 to 40 [ 2618.258069] loop7: detected capacity change from 0 to 264192 [ 2618.270842] loop5: detected capacity change from 0 to 264192 23:17:18 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) pipe2(0x0, 0x0) [ 2618.327984] 9pnet_fd: Insufficient options for proto=fd 23:17:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2618.335685] syz-executor.3: attempt to access beyond end of device [ 2618.335685] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2618.337451] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:17:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x3, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000140)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) [ 2618.363892] syz-executor.3: attempt to access beyond end of device [ 2618.363892] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.365832] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:17:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2618.427765] syz-executor.3: attempt to access beyond end of device [ 2618.427765] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.429710] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:17:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, 0x0, 0x0) [ 2618.447484] syz-executor.3: attempt to access beyond end of device [ 2618.447484] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.449123] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2618.503193] loop5: detected capacity change from 0 to 264192 23:17:19 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) 23:17:19 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) clock_gettime(0x0, &(0x7f0000003400)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/76, 0x4c}], 0x2, &(0x7f0000000480)=""/111, 0x6f}, 0x10001}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000240)}], 0x2, &(0x7f0000000640)=""/28, 0x1c}, 0x3ff}, {{&(0x7f0000000680)=@ax25={{0x3, @null}, [@rose, @rose, @null, @default, @bcast, @netrom, @netrom, @default]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/209, 0xd1}], 0x1, &(0x7f0000000840)=""/240, 0xf0}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/64, 0x40}, {&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/85, 0x55}], 0x4, &(0x7f0000000c80)}, 0x5}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/93, 0x5d}, {&(0x7f0000001dc0)=""/245, 0xf5}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/115, 0x73}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000003040)=""/209, 0xd1}], 0x7, &(0x7f00000031c0)=""/226, 0xe2}, 0x9}], 0x5, 0x120, &(0x7f0000003440)={r4, r5+60000000}) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r6, &(0x7f0000000080)="01", 0x292e9) 23:17:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2618.623932] loop7: detected capacity change from 0 to 264192 [ 2618.656707] loop3: detected capacity change from 0 to 40 [ 2618.693090] syz-executor.3: attempt to access beyond end of device [ 2618.693090] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2618.694753] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2618.702873] syz-executor.3: attempt to access beyond end of device [ 2618.702873] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.704545] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2618.732901] syz-executor.3: attempt to access beyond end of device [ 2618.732901] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.734536] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2618.743930] syz-executor.3: attempt to access beyond end of device [ 2618.743930] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2618.745592] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2619.081488] 9pnet_fd: Insufficient options for proto=fd 23:17:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4e000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 23:17:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x7, 0x4, 0x9, 0x0, 0x763f, 0x8400, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa4, 0x4, @perf_config_ext={0x7ff, 0x88c}, 0x8000, 0x10000, 0x3ff, 0x0, 0x9, 0x1, 0x1200, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:17:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x6, 0x1}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, r3, 0xee01}, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf0}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000044) vmsplice(r0, &(0x7f0000000180), 0x0, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2}, 0xe) 23:17:40 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:17:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:17:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x101000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:40 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2640.054788] loop7: detected capacity change from 0 to 264192 [ 2640.067844] loop5: detected capacity change from 0 to 264192 [ 2640.073596] loop3: detected capacity change from 0 to 40 [ 2640.104854] 9pnet_fd: Insufficient options for proto=fd 23:17:40 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2640.143210] syz-executor.3: attempt to access beyond end of device [ 2640.143210] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2640.144918] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2640.172254] syz-executor.3: attempt to access beyond end of device [ 2640.172254] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.173896] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:17:40 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x130000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:40 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x4, 0xf61a}) write$binfmt_aout(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 23:17:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x50110000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (fail_nth: 1) [ 2640.211094] syz-executor.3: attempt to access beyond end of device [ 2640.211094] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.212790] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2640.226126] syz-executor.3: attempt to access beyond end of device [ 2640.226126] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.227967] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2640.265257] FAULT_INJECTION: forcing a failure. [ 2640.265257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2640.266901] CPU: 0 PID: 13207 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230421 #1 [ 2640.267982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2640.269026] Call Trace: [ 2640.269375] [ 2640.269683] dump_stack_lvl+0xc1/0xf0 [ 2640.270201] should_fail_ex+0x4b4/0x5b0 [ 2640.270752] _copy_from_user+0x2e/0x180 [ 2640.271299] move_addr_to_kernel.part.0+0x31/0x110 [ 2640.271966] __sys_connect+0xde/0x1a0 [ 2640.272495] ? __pfx___sys_connect+0x10/0x10 [ 2640.273103] ? fput+0x2f/0x1a0 [ 2640.273559] ? ksys_write+0x1a7/0x260 [ 2640.274075] ? __pfx_ksys_write+0x10/0x10 [ 2640.274628] __x64_sys_connect+0x73/0xb0 [ 2640.275182] ? syscall_enter_from_user_mode+0x21/0x50 [ 2640.275878] do_syscall_64+0x3f/0x90 [ 2640.276388] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2640.277045] RIP: 0033:0x7fa2dc394b19 [ 2640.277533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.279757] RSP: 002b:00007fa2d990a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2640.280729] RAX: ffffffffffffffda RBX: 00007fa2dc4a7f60 RCX: 00007fa2dc394b19 [ 2640.281635] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000006 [ 2640.282543] RBP: 00007fa2d990a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.283460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2640.284367] R13: 00007fffe020caaf R14: 00007fa2d990a300 R15: 0000000000022000 23:17:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x2a040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, '\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) [ 2640.285299] 23:17:40 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2640.298150] loop5: detected capacity change from 0 to 264192 [ 2640.306238] loop7: detected capacity change from 0 to 264192 [ 2640.409068] loop3: detected capacity change from 0 to 40 [ 2640.446297] syz-executor.3: attempt to access beyond end of device [ 2640.446297] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2640.448333] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2640.458204] syz-executor.3: attempt to access beyond end of device [ 2640.458204] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.459807] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2640.481309] syz-executor.3: attempt to access beyond end of device [ 2640.481309] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.482984] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2640.485686] syz-executor.3: attempt to access beyond end of device [ 2640.485686] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2640.487431] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2640.864300] 9pnet_fd: Insufficient options for proto=fd [ 2642.114401] Bluetooth: hci7: command 0x0405 tx timeout [ 2652.167891] loop3: detected capacity change from 0 to 40 23:17:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 23:17:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x8000, 0x4) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:17:52 executing program 2: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:52 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}) epoll_create(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fspick(r0, &(0x7f0000000100)='./file0\x00', 0x1) io_setup(0x1f, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa040000fdffffff050000000000000007000000000000001f0000000000000001000000000000000000000000000000000000000000000000000000000000000700000000000000810000000000000000000080000000000400000000000000fffeffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a57c4d90441596810dd0813de7b1927d52037fa19da63c94445647f26b20c7d50c474c7393fba27670928558258a"]) io_submit(r2, 0x5, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000600)="814a012aa1f241c69ee3946364857175c527951fd3a1c465c4b38cc024194b4e27f61b3c8f5778b68646a80d3eb5042195d5090bbe43dc26a1481f9d48bf84ca3585a4ec0093f8749a41a00826801c0caa45edd315d6ab91333840e17f01a99a9fe1dfc644f262d7acdcccfe095c9d5f68c86e50b5acd3d4f9fa48a91f39b4d44e4cc587396969c6c1a5c41b56453ba9260a216a8ec3208daac854407f4e74df785a86813151a2f546051bf40ce951d436a3c0ad28596ea4800d264eeb11ff65e857067790fb512b14330072b6f51cc27e1ce8f4c5173d4cdaa050b463123a27fa70682f90ee6cb56789ba3b279a8b447eb799c95ac6c3b3c45938fd9c1e978d9e2c47a51a3e175c35e451fadf4e8cff26c0054ee44255442d12eeabe90094e0dc902795181833e110066b798aa8d5314a8de5458e4a75611c95e1a768109b1404cbc0685d60aae3583ba9cff8a25588f9f82674d9a2b05a55dd12310020b53122a49a30902cac9950babb9401d1874e62f2165c9d7ad468cf9c28ac66f9c269fa60e659a53d33398db1d33c675e4e56b54c0446f5d7a69f546ea8bf278580cdb44a930a6573fc332c29b96bd98aad4078cd8e45ca752f9bbf150fd7a63becc3ff038b96f16451b53d789fe61b7be8cba31b7ebf5ce49f34db87e9a6a52d893e5ea3db95fe8cd9d10e6a44c5213ecd3560cb648ac0b76557ea565a6734225b5869cfd504552aaa7aee9948ff3baa789c70e80970b401bec80356ae1d2ec3e0e42ff1f5128a3365e7e25337c527e5272c0177f97ef781b2ede85822a0738b526c35f8b3af69528d892fb9580559426fc22773dcf8908cdbb2f3c2c1748ba628d6d2fb23c7661b684e3ee94177b672957b59b8c36dd25592704ddd7bdfae4c20ae447e2fa5b316315aaf77a966626b1b573e046ca49c8264d482ac4e1bfbec2883db5a3904daed4b41e1f577cf3f43912a13a21ea8e01005306c6c0a396d82244d215894d2372c4ddc788c131834439b548b6d544142c4384aaf8521be1fd050371768a3b828c6ab60daa0a33fece1d7b0487f0e69591e1a849a63abc413961d4590e64c95dc62adac5d064b675185f792fb297cfd5dc4cf2a8714e833113b1061f3765f9a6b062cd2fb03c865134b855f0118e5bb2ac77f408733079bd7620d219c6aa7896d64371a77a3944a3bffd0d124cec10d752c0551e368b7f424f1d00def6f18f637a8e9109744bca0c317a64f97d749070abc6095612d942b784a52720b804ddc860636a277b9560588837e6a3b2ac3beef28774eef911f1276fe7f1f23ff6dc9054766bc0f2b7c47be5074227c01ce13a78a48a01ff42678eff575b3ceadd3aed58caa55ea27010c0af4d0874037b4314d0b951c78a0387a12f7ad96b572c6f97e75fec6fc82c2891c6e2606841caf9890cf6500cf835fcac56caf8bfbdb8973dd565246ad53ce844ec1d696131e2c160b0bfe6cc16cddf1a33d48f69587c06e61ae790ca326fb04affa06b37c7236bc7f0b3a085ae5aa6e929d89e303dcaee44803998eabccf829d9a4976dec00f56740d2bc2170d10ac96c96573aa0f9d3173820a6f3eb2c67f39f9c8d40f5f8dfcdf8f570ec674562eb64a4fbd6408dead43a6fa442e999f2bc109f7654ea05ff455e38f41efb9a5aca91daf0b463eed92d107db2a70847977854e6c0a793fff8fe55e1f9597fd0a007eee727471d9fc9352e0fd9878a606bdceb8470ce6b921aa50467fdf8326507af592aa2150570dd68477f66449422069be52d4feb9a2217637be34a80724b9ebe7544f10260be208986db1147f547529f0e5696c22e19846a84e386beb2b88c3b06730ff7eea7f1634358e877f8d58511353e92d464e9c802339af92892c4e51bd4ff311e1c1f2b5e822a6c15a8fd249650694dd16311460702628733f256900cbff7ea28533996d1caed7f1a28bb395c4e632853641df730db074a2e08d360792faffe81b755924ad324c76cf030ab7636e903fdee2648149cbab02b76f135ca1e1dc113be918e6ca995526bc190e495c961ab148325fc4f5916cf9610bf3cbb6a24f4b016abf62fa63ff1919e3b71631e9436be1f67a7d4f18fa53bb41f8be3273ef77c4fb96ea0ac3a0a75b1896b8f33d895de40c92ecd90bfcd55d5b3347d99654c72eb08eb1daae19f5aacee925c0fea666e042fd1c714cf7c303b1bc04195830a656f01c859f72e3871e5b4c59730d7fb502fa3d83f6fd8756117314f9809e2d447472ae347783160f5ab544d0289fb05b63acbb8bb2ee82a3c9808c8ea02fff548aced85245d55a83587c0dadfce958dfd477f50a2ddc95a418605acdc9a975abeda248c59de5514ed5503d70f7335637af3ed1212560e2c22519b9f3d13bfcd06d99c0a901835495bf86e1a0e6eb68aae14b3f9cf3f65b7c33dcc59512c209b4c", 0x6c0}]) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000180)=0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="8723c05c6ab93416cd948a869321c58c0d760b57031f9af3fe557f345b629465bf8c8cc565ebb76c2abc8a58194631ab155ed106acb517959c4d65749a800541429e33943eed4e3b62505ef3d26e07d9cd11a423edf6a73fd25592418804556b9212ed608ae492858c9042d059e7e4db3d6fd364bf31b6d384bdf18e3959620fa97063726d9191443f0128be9c8cb2d8af104fbdb61118e4fa2d72d7994b95cef2d694fa2fcb56c34f1a29164720ad03b535d2569383e3bf40867e46279f09d929b7148369780b5d1e6f06c91f9a17d8ed6e0a4545f1993bd73da59dba672b83644d5e54", 0xe4, 0x778, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r1, r4, 0x0, 0x3ff) 23:17:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:17:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (fail_nth: 2) 23:17:52 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2652.175268] loop7: detected capacity change from 0 to 264192 [ 2652.186051] FAULT_INJECTION: forcing a failure. [ 2652.186051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2652.187606] CPU: 1 PID: 13231 Comm: syz-executor.0 Not tainted 6.3.0-rc7-next-20230421 #1 [ 2652.188619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2652.189620] Call Trace: [ 2652.189957] [ 2652.190261] dump_stack_lvl+0xc1/0xf0 [ 2652.190772] should_fail_ex+0x4b4/0x5b0 [ 2652.191309] _copy_to_user+0x2e/0x150 [ 2652.191841] simple_read_from_buffer+0xd0/0x170 [ 2652.192443] proc_fail_nth_read+0x19c/0x230 [ 2652.193008] ? __pfx_proc_fail_nth_read+0x10/0x10 23:17:52 executing program 6: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2652.193642] ? security_file_permission+0xb5/0xe0 [ 2652.194385] vfs_read+0x260/0x940 [ 2652.194844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2652.195491] ? __pfx_vfs_read+0x10/0x10 [ 2652.196043] ? __fget_files+0x270/0x480 [ 2652.196606] ksys_read+0x12b/0x260 [ 2652.197085] ? __pfx_ksys_read+0x10/0x10 [ 2652.197629] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2652.198319] do_syscall_64+0x3f/0x90 [ 2652.198815] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2652.199490] RIP: 0033:0x7fa2dc34769c [ 2652.199986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2652.202267] RSP: 002b:00007fa2d990a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2652.203235] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa2dc34769c [ 2652.204126] RDX: 000000000000000f RSI: 00007fa2d990a1e0 RDI: 0000000000000005 [ 2652.205024] RBP: 00007fa2d990a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2652.205914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2652.206781] R13: 00007fffe020caaf R14: 00007fa2d990a300 R15: 0000000000022000 [ 2652.207695] 23:17:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2652.239095] loop5: detected capacity change from 0 to 264192 23:17:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:17:52 executing program 2: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:17:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2652.300814] 9pnet_fd: Insufficient options for proto=fd [ 2652.317540] syz-executor.3: attempt to access beyond end of device [ 2652.317540] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2652.319082] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2652.354120] syz-executor.3: attempt to access beyond end of device [ 2652.354120] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2652.355825] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2652.377767] loop7: detected capacity change from 0 to 264192 [ 2653.065843] 9pnet_fd: Insufficient options for proto=fd [ 2667.428313] loop7: detected capacity change from 0 to 264192 23:18:08 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 23:18:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:18:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:08 executing program 2: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:08 executing program 4: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r1, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000400)={{}, r1, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) dup2(r0, r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) accept(r3, &(0x7f0000000380)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x1f, 0x0, 0x2, 0x85, 0x0, 0x23, 0x18000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x6, 0x8, 0x4, 0x1, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0xaee7}, 0x0, 0x6, r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) 23:18:08 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2667.485089] loop3: detected capacity change from 0 to 40 [ 2667.491405] loop5: detected capacity change from 0 to 264192 23:18:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2667.505446] 9pnet_fd: Insufficient options for proto=fd 23:18:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x4f, 0x5, 0x8, 0x0, 0x2, 0x80000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x200, 0x1, 0x5, 0x3, 0xffff, 0xed, 0xde8, 0x0, 0xab8, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 23:18:08 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2667.542543] syz-executor.3: attempt to access beyond end of device [ 2667.542543] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2667.543551] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2667.548197] loop7: detected capacity change from 0 to 264192 23:18:08 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x7) [ 2667.580896] syz-executor.3: attempt to access beyond end of device [ 2667.580896] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2667.581930] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:18:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xff}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2667.637067] loop5: detected capacity change from 0 to 264192 [ 2667.718678] loop3: detected capacity change from 0 to 40 [ 2667.758953] syz-executor.3: attempt to access beyond end of device [ 2667.758953] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2667.760031] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2667.762966] syz-executor.3: attempt to access beyond end of device [ 2667.762966] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2667.763953] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2667.780608] syz-executor.3: attempt to access beyond end of device [ 2667.780608] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2667.781636] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2667.786785] syz-executor.3: attempt to access beyond end of device [ 2667.786785] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2667.787878] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2668.289455] 9pnet_fd: Insufficient options for proto=fd 23:18:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x505000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 23:18:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:18:19 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x7ffffffff000) 23:18:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x5, 0x3ff, &(0x7f0000000180)="a3e877dbfadbcd9703ce2b833cf0aaa9790b21caa6514a264815389d618dd05c7af3ad56da737d28eb124bb3986885b129777279b44c2fc1103ce27024f9304952d7078304c9b693fce3d02d334c8ccff4462a7c2c79cb87c3f575a280d65268dd9305c6009efa315621539a084ff3cba720c411bda9fdc6381bc432ccf62680d3f2d32bd09628152541651ce6f0d6847c7283c0f9203c6e15bd8732a3f33e7f389b6e11c57078f00506999b4f44427593a164a847618e877db0eb7ba5dc30c2d3c8dff93b1e6769d73be472b249ab86bf2ea52af6b1335d5d62cc10577291caf66dc88f87a4e194", 0xe8) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}], 0x1, 0x0) 23:18:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x78000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2679.011199] loop5: detected capacity change from 0 to 264192 [ 2679.018070] loop7: detected capacity change from 0 to 264192 [ 2679.045230] loop3: detected capacity change from 0 to 40 23:18:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="48df9fe07ea5c600", 0x8}], 0x1, 0x7fffffc, 0xffffffff) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) fallocate(r0, 0x3, 0x803ffff, 0x8040001) 23:18:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x7}}, '.\x00'}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0xa9100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@msize={'msize', 0x3d, 0x3f}}, {@version_L}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@hash}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r10, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 2679.106356] 9pnet_fd: Insufficient options for proto=fd 23:18:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2679.160886] loop7: detected capacity change from 0 to 264192 [ 2679.166157] syz-executor.3: attempt to access beyond end of device [ 2679.166157] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2679.167388] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2679.180311] syz-executor.3: attempt to access beyond end of device [ 2679.180311] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2679.181195] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2679.212157] loop5: detected capacity change from 0 to 264192 [ 2679.218726] syz-executor.3: attempt to access beyond end of device [ 2679.218726] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2679.219742] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2679.255319] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2679.344107] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2679.872981] 9pnet_fd: Insufficient options for proto=fd [ 2692.992863] loop3: detected capacity change from 0 to 40 23:18:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:18:33 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf6756f405af52b29) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x1804, &(0x7f0000000280)='\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000740)='./file1/file0\x00', &(0x7f0000000300), 0x3800c00, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@aname}, {@noextend}, {@version_9p2000}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@version_u}], [{@smackfshat={'smackfshat', 0x3d, '\xd9-'}}, {@subj_role={'subj_role', 0x3d, '[*-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@uid_gt={'uid>', r5}}]}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000580)={0x7, 'veth0_to_team\x00', {0x7ff}, 0xb8e2}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xc00b0, &(0x7f00000005c0)=ANY=[@ANYBLOB="74726166646e6f3d0000000000000018919c209d1442f10a7589aeef73baca6c636da683b39fb9c029978c44dc7960cc9b2bfcf456754c7c80e53087c85fa1f1be0b5a19", @ANYRESHEX=r1, @ANYBLOB="2c8c66646e6f3dfc0e5bf1f3dffb3fe84c97a470e60c23c10a50765ce4b7e465e4caa2", @ANYRESHEX=r6, @ANYBLOB=',cache=none,aname=,\x00']) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r7 = openat$cgroup_ro(r3, &(0x7f0000000680)='memory.stat\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000000200), 0x8) shutdown(r8, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x884, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',noehtend,version=9p2000.L,smaskfsdef=,fowner>', @ANYRESDEC=r5, @ANYBLOB=',\x00']) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) bind$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x8, 0x0, 0x1, 0xce, 0x6, @random="4e53c0d259c5"}, 0x14) 23:18:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x605000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:33 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:33 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) shutdown(r0, 0x0) fstat(r0, &(0x7f0000000000)) 23:18:33 executing program 3: setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x2, "c3bb4a7d5cad32574397ef29bfafb985e4426df9"}, 0x15, 0x2) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:18:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2692.996526] loop5: detected capacity change from 0 to 264192 23:18:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2693.067607] loop7: detected capacity change from 0 to 264192 23:18:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 23:18:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:33 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2693.131954] syz-executor.3: attempt to access beyond end of device [ 2693.131954] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2693.133561] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2693.155756] syz-executor.3: attempt to access beyond end of device [ 2693.155756] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2693.157506] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:18:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2693.174662] 9pnet_fd: Insufficient options for proto=fd [ 2693.180812] 9pnet_fd: Insufficient options for proto=fd [ 2693.180811] loop5: detected capacity change from 0 to 264192 [ 2693.199078] syz-executor.3: attempt to access beyond end of device [ 2693.199078] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2693.199978] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:18:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x7}}, '.\x00'}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0xa9100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@msize={'msize', 0x3d, 0x3f}}, {@version_L}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@hash}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r10, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 2693.228198] loop7: detected capacity change from 0 to 264192 23:18:33 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2693.282883] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2693.284044] 9pnet_fd: Insufficient options for proto=fd [ 2693.816827] 9pnet_fd: Insufficient options for proto=fd 23:18:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_measure}, {@subj_role={'subj_role', 0x3d, 'rfdno'}}, {@uid_eq={'uid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@uid_eq={'uid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:18:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x7}}, '.\x00'}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0xa9100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@msize={'msize', 0x3d, 0x3f}}, {@version_L}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@hash}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r10, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:18:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc2000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:46 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r1, &(0x7f0000000180)='./file1\x00', 0x442, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:18:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x705000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) [ 2705.667028] loop5: detected capacity change from 0 to 264192 [ 2705.707537] loop7: detected capacity change from 0 to 264192 [ 2705.718541] loop3: detected capacity change from 0 to 40 23:18:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xca000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2705.764491] loop5: detected capacity change from 0 to 264192 23:18:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd1000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2705.856760] syz-executor.3: attempt to access beyond end of device [ 2705.856760] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2705.858511] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2705.864508] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2705.865842] loop7: detected capacity change from 0 to 264192 [ 2705.866581] 9pnet_fd: Insufficient options for proto=fd 23:18:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd7000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2705.909869] loop5: detected capacity change from 0 to 264192 [ 2705.909928] syz-executor.3: attempt to access beyond end of device [ 2705.909928] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2705.911923] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:18:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x805000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2706.004179] loop7: detected capacity change from 0 to 264192 23:18:59 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:18:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd92f0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:59 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdlo?', @ANYRESHEX=r1, @ANYBLOB="0f172275fd60675d2c00000000000000c0440152c57436ddc1dd91ce01ea1ad698e723efe1e3227b155efdcf4a5030af5f0d6c85121086eded8cbed4ca2d8ce119d3a3a99baee2506aaa7d627dc2f62f835bf0cfc3b9f4a1cf6c32af0ffd3c814f792c4847cc97b88f160d6c9b0bc5703f3abbfdc1a57408"]) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:18:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}}) 23:18:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 23:18:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000240)='./file1\x00', 0x120, 0x84) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1f, 0xec, 0x65, 0x48, 0x0, 0x2, 0x800, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x81, 0x1a}, 0x800, 0x7, 0x8, 0x9, 0x9c5, 0x7fff, 0xe01, 0x0, 0x3, 0x0, 0x8000}, r3, 0xb, 0xffffffffffffffff, 0x1) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:18:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:18:59 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x7}}, '.\x00'}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0xa9100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@msize={'msize', 0x3d, 0x3f}}, {@version_L}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@hash}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r10, &(0x7f0000001140)=[{&(0x7f0000003200)=""/4099, 0x1003}], 0x1, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 2719.278111] loop3: detected capacity change from 0 to 40 [ 2719.282625] loop5: detected capacity change from 0 to 264192 [ 2719.287988] loop7: detected capacity change from 0 to 264192 23:18:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) [ 2719.332623] syz-executor.3: attempt to access beyond end of device [ 2719.332623] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2719.333898] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2719.336555] syz-executor.3: attempt to access beyond end of device [ 2719.336555] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.337420] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2719.355920] syz-executor.3: attempt to access beyond end of device [ 2719.355920] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.356807] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2719.358602] syz-executor.3: attempt to access beyond end of device [ 2719.358602] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.359531] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe0000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x800002, 0x110) 23:19:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x905000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:00 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2719.427910] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2719.429949] 9pnet_fd: Insufficient options for proto=fd 23:19:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) [ 2719.467812] loop3: detected capacity change from 0 to 40 [ 2719.473126] loop7: detected capacity change from 0 to 264192 [ 2719.473862] loop5: detected capacity change from 0 to 264192 23:19:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) 23:19:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:00 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000040)={0x7, 0x8001, 0x1, 'queue0\x00', 0x7}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) setresuid(0x0, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'caif0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) 23:19:00 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2719.564995] loop7: detected capacity change from 0 to 264192 [ 2719.609867] syz-executor.3: attempt to access beyond end of device [ 2719.609867] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.611525] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2719.648780] syz-executor.3: attempt to access beyond end of device [ 2719.648780] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.650654] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2719.657965] syz-executor.3: attempt to access beyond end of device [ 2719.657965] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2719.658910] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2732.874797] loop3: detected capacity change from 0 to 40 [ 2732.876707] loop5: detected capacity change from 0 to 264192 23:19:13 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe4000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) 23:19:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 23:19:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:19:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x20, 0x80, 0xb7, 0x3, 0x0, 0x8, 0x8, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x305}, 0x40200, 0x3f, 0x6, 0x7, 0x83c5, 0x4, 0xfff, 0x0, 0x7, 0x0, 0x6}, r0, 0xffffffffffffffff, r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x41130000) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1d, 0x1, 0xff, 0x8, 0x0, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3662, 0x1, @perf_bp={0x0, 0x5}, 0x142, 0x7fffffff, 0xfffffc00, 0x2, 0x3, 0xf47c, 0x8001, 0x0, 0x58, 0x0, 0x7fffffff}, 0x0, 0x5, r2, 0x9) futex(&(0x7f0000000680), 0x3, 0x2, 0x0, &(0x7f0000004440), 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:19:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa30000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lgetxattr(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)=@known='system.posix_acl_access\x00', &(0x7f00000016c0)=""/60, 0x3c) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001740)='devices.allow\x00', 0x2, 0x0) pwritev(r5, &(0x7f00000017c0)=[{&(0x7f0000001780)="3adbc86eeeb3aff3780707fa956723", 0xf}], 0x1, 0x932a, 0x2) write(r4, &(0x7f0000000080)="01", 0x292e9) r6 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x5, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000240)="e2f2", 0x2, 0x4}, {&(0x7f0000000300)="15cdaf1a97c4fda2925ed27ef0595c85fe002b7a5e1f", 0x16, 0x5}, {&(0x7f0000000340)="0a2189564ece98ffb38db46938c8442ef6dfaca0aed224447081ff10d17de6643cabfdc83c91a525fe41c13d4e4e40d258b4d38583659b0c15e24716106daba1298970137e377748292d6dde4bc2391fce8b448291492fc633f9f5a58ac22e15b7b4939b283a3c17d129ab8d06260518db5ee707afacb3b963ee453b5cb4cc2e417f84a3be11f9b60734d7bd93f16cbf76b5b742f424dbd3ae1bfc70e1cf82c84555b92987d6f0ab029b3a4fc07f04c7a9b99f32964cd7ebe76b375bcf4cda593ec82e6b4dd80d6358aad5378628153e75a18569e526eb4cd4f930b006cb5f9da477ce221ae1", 0xe6, 0x8001}, {&(0x7f0000000440)="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", 0x1000, 0xffffffffffffffdc}, {&(0x7f0000001440)="c32d274cb510f2364bee0f79f7e89820eca28d956a67264c83d7a5c9209beb42ac2dcafe11d00914ae3d2629658dea2c98cdd80164428cd1bb6370037b5dd570c498f5ed053de06b30d310a4a7d078b0cf3e6add62ddf2ce2954ae7d8e9d358d7bc936182422aba04f", 0x69, 0x81}], 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB='uni_xlate=1,nonumtail=0,fsname=vfat\x00,context=root,appraise_type=imasig,func=MODULE_CHECK,fowner=', @ANYRESDEC, @ANYBLOB=',do,\x00'/15]) openat(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x21) openat(r3, &(0x7f0000001700)='./file1\x00', 0x220000, 0x11) 23:19:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00aeaec6e3b1cc24106bcaf146c4a5efafc68b2960fb493acf6014115453699656c0e3029a06ed390c0e616a59079db048fe7128"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x41030) write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 2732.932136] loop7: detected capacity change from 0 to 264192 [ 2732.946577] syz-executor.3: attempt to access beyond end of device [ 2732.946577] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2732.948280] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2732.972077] syz-executor.3: attempt to access beyond end of device [ 2732.972077] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2732.973819] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 23:19:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xef000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2733.017080] syz-executor.3: attempt to access beyond end of device [ 2733.017080] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2733.018948] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:13 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2733.128219] loop5: detected capacity change from 0 to 264192 [ 2733.183968] loop7: detected capacity change from 0 to 264192 23:19:13 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000", 0x30}, {&(0x7f0000010100), 0x0, 0x20}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x960448, &(0x7f0000000040)) 23:19:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf0ffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2733.282095] loop3: detected capacity change from 0 to 40 23:19:13 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000480)=0x6) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000180)='./file0/file0\x00', 0x12) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 2733.342006] syz-executor.3: attempt to access beyond end of device [ 2733.342006] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2733.343362] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2733.348213] loop5: detected capacity change from 0 to 264192 [ 2733.395784] syz-executor.3: attempt to access beyond end of device [ 2733.395784] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2733.397102] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) 23:19:26 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="824a85198e12d3d079b4c53a1c880e1ab3a2a13a0a7796b4f36a786163bbff5fc41324b946ca1f346e2fcb", 0x2b}], 0x1, 0x97b, 0x47a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) [ 2746.200466] loop5: detected capacity change from 0 to 264192 23:19:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (fail_nth: 1) 23:19:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:19:26 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(0x0, 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x140810, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664666f3da800b342050ccc019334c03ddf9158609df56a179d8489014831579614e6d80cafb150e27f5cfc5594d9b31bb3d9c1b6e8e91e2fef246d45d0e3e4bcf7a5892e15d5883ddcfe55c5e42c8b390e4c5e25d125bfde9a43067c19cf5c2d55e2bbdbf28430f3b52cfd1ba9d29e3edb64fccff655ede504fae9953c42ffffffff000000000c0a7e7dd5a6189e6f7a11b19411468c7da8b81dfaef", @ANYRESHEX=r1, @ANYBLOB=',\x00']) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:19:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2746.223956] 9pnet_fd: Insufficient options for proto=fd 23:19:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 23:19:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2746.251439] loop3: detected capacity change from 0 to 40 23:19:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf9040000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2746.262972] loop7: detected capacity change from 0 to 264192 [ 2746.296091] syz-executor.3: attempt to access beyond end of device [ 2746.296091] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.296987] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2746.314041] loop5: detected capacity change from 0 to 264192 [ 2746.318083] syz-executor.3: attempt to access beyond end of device [ 2746.318083] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2746.318862] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2746.341645] syz-executor.3: attempt to access beyond end of device [ 2746.341645] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2746.342457] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2747.057753] 9pnet_fd: Insufficient options for proto=fd 23:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:19:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:19:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 23:19:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:38 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(0x0, 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:38 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) openat(r3, &(0x7f0000000180)='./file1/file0\x00', 0x400000, 0xd) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:19:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) [ 2758.226738] loop5: detected capacity change from 0 to 264192 [ 2758.232575] loop7: detected capacity change from 0 to 264192 23:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2758.238559] loop3: detected capacity change from 0 to 40 23:19:38 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(0x0, 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2758.313708] syz-executor.3: attempt to access beyond end of device [ 2758.313708] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2758.315656] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf11000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x4, 0x0) 23:19:39 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2758.356468] loop5: detected capacity change from 0 to 264192 23:19:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:19:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:39 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2758.436446] loop5: detected capacity change from 0 to 264192 [ 2758.443146] syz-executor.3: attempt to access beyond end of device [ 2758.443146] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2758.444013] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2758.487292] syz-executor.3: attempt to access beyond end of device [ 2758.487292] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2758.489458] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2758.517772] syz-executor.3: attempt to access beyond end of device [ 2758.517772] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2758.519788] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:19:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) 23:19:51 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10080, 0x37) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xc108, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@fsname={'fsname', 0x3d, '\'\x00\f\xcdA\n\x01\x00\x00\x00\x00\x00\x00\x00:\xff\xff\xff\xff(\x88\xcd\x88=\fur\xc4)\x9b\xff\x16`\x19\x05\b\xe6,^\xac\xc6#5\xd9\xb7\x18Y\xcf\xd0\x91\xfa\f3<\x99\x01&\xe1{\x80\xf6\xb9*\n\xfc\xd5m\x1e\xe1\x91\x82\x1a\xc7\xdbb\x1ba\x1c\x00\xba\xa4u\xf7\x93\xba\x13\x80\x01\xb0\xec\a0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) [ 2771.081815] loop5: detected capacity change from 0 to 264192 [ 2771.090997] loop3: detected capacity change from 0 to 40 [ 2771.116108] loop7: detected capacity change from 0 to 264192 [ 2771.149108] 9pnet_fd: Insufficient options for proto=fd [ 2771.150685] 9pnet_fd: Insufficient options for proto=fd [ 2771.153543] syz-executor.3: attempt to access beyond end of device [ 2771.153543] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2771.155089] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:19:51 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:19:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x18, 0x0) 23:19:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2771.168807] 9pnet_fd: Insufficient options for proto=fd [ 2771.169174] 9pnet_fd: Insufficient options for proto=fd [ 2771.175800] syz-executor.3: attempt to access beyond end of device [ 2771.175800] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2771.177543] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2771.218168] syz-executor.3: attempt to access beyond end of device [ 2771.218168] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2771.219629] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:19:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x1f, 0x0, 0x81, 0x0, 0x1, 0x3110, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x93b}, 0x54008, 0x93c8, 0x5, 0x7, 0x0, 0x2, 0x6, 0x0, 0x10000, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:19:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1100000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:19:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) [ 2771.294586] loop5: detected capacity change from 0 to 264192 23:19:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:19:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x40, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES32=r0]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) openat(r1, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') name_to_handle_at(r4, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@fuse_with_parent={0x18, 0x82, {{0x200, 0x8}, {0xfff, 0x5, 0x3}}}, &(0x7f0000000300), 0x1200) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) [ 2771.343312] 9pnet_fd: Insufficient options for proto=fd 23:19:52 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2771.360497] loop7: detected capacity change from 0 to 264192 23:19:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x134, 0x0) [ 2771.417507] loop3: detected capacity change from 0 to 40 [ 2771.423888] FAT-fs (loop3): Unrecognized mount option "ÿÿ" or missing value 23:19:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff2f0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2771.559094] loop5: detected capacity change from 0 to 264192 [ 2772.160024] 9pnet_fd: Insufficient options for proto=fd [ 2772.246748] loop3: detected capacity change from 0 to 40 [ 2772.250519] FAT-fs (loop3): Unrecognized mount option "ÿÿ" or missing value 23:20:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1201000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:03 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2783.215837] loop7: detected capacity change from 0 to 264192 [ 2783.233419] loop5: detected capacity change from 0 to 264192 23:20:03 executing program 3: write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x3}, 0x8) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x22300, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:20:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 23:20:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x220, 0x0) 23:20:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfff7ffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@mmap}, {@access_client}, {@nodevmap}, {@cache_fscache}]}}) 23:20:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:03 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2783.263696] loop3: detected capacity change from 0 to 40 [ 2783.269091] 9pnet_fd: p9_fd_create_unix (13682): problem connecting socket: ./file0: -111 23:20:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1800, 0x0) 23:20:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffdffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:03 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2783.304605] 9pnet_fd: p9_fd_create_unix (13686): problem connecting socket: ./file0: -111 [ 2783.335268] syz-executor.3: attempt to access beyond end of device [ 2783.335268] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2783.337072] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:20:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1630000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2783.355096] syz-executor.3: attempt to access beyond end of device [ 2783.355096] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2783.356974] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2783.370752] loop5: detected capacity change from 0 to 264192 [ 2783.402844] syz-executor.3: attempt to access beyond end of device [ 2783.402844] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2783.404538] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2783.422752] syz-executor.3: attempt to access beyond end of device [ 2783.422752] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2783.424760] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2783.435832] loop7: detected capacity change from 0 to 264192 23:20:16 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0) [ 2796.144117] loop3: detected capacity change from 0 to 40 23:20:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xf1}}) 23:20:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x41030) clone3(&(0x7f0000000400)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), {0x3e}, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/180, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, r2, r3, 0xffffffffffffffff], 0x8, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)=ANY=[@ANYBLOB="010005016dae6f0000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c653100a609b4bb3b58ca341f01ba2f4bc483c23831aa3652a441b9f34babcbc21adacb92229d5f06d97e4b57bfbd1389d684c1e26ed96dc076b33da13701700b713e3f17e45212058578b72447cdb9a8d2c029df2a183b12c6df3931a84b"]) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0x8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:20:16 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x5a) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:20:16 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2796.150269] loop7: detected capacity change from 0 to 264192 [ 2796.195236] loop5: detected capacity change from 0 to 264192 [ 2796.205704] syz-executor.3: attempt to access beyond end of device [ 2796.205704] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2796.206680] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2796.209633] syz-executor.3: attempt to access beyond end of device [ 2796.209633] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2796.210559] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:20:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1801000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2796.229986] syz-executor.3: attempt to access beyond end of device [ 2796.229986] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2796.231009] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:20:16 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:16 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, 0x0, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3401, 0x0) [ 2796.279567] loop7: detected capacity change from 0 to 264192 23:20:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffff7ff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:16 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fsmount(r1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:20:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2ce90948277ece", @ANYRESHEX=r1, @ANYBLOB=',\x00']) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:20:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1901000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2796.376606] loop3: detected capacity change from 0 to 40 23:20:17 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2796.389636] loop5: detected capacity change from 0 to 264192 [ 2796.412785] 9pnet_fd: Insufficient options for proto=fd [ 2796.420475] loop7: detected capacity change from 0 to 264192 [ 2796.495765] syz-executor.3: attempt to access beyond end of device [ 2796.495765] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2796.496707] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2796.521612] syz-executor.3: attempt to access beyond end of device [ 2796.521612] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2796.522503] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2797.237267] 9pnet_fd: Insufficient options for proto=fd 23:20:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) 23:20:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) 23:20:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x400000}, {0xcd, 0x7ff}]}, 0x14, 0x2) 23:20:30 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fchdir(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000500)={{}, r7, 0x12, @inherit={0xfffffffffffffe4c, &(0x7f0000002940)={0x1, 0x3, 0x5, 0xffffffff, {0x28, 0x0, 0xe4, 0x5, 0x9}, [0x1, 0x13fdbcef, 0x81]}}, @subvolid=0x80000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000140)={{r5}, r7, 0x0, @inherit={0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="0100000000000000010000000000000001000100000000000900000000000000120000000000000009000000000000000100000000000000070000000000000007000000000000000100000000000000d8fc44d629551c7318044898507b70036d375bae94802152bd77941ad4e5e99e46e0d435741f46065869085ff3843eb7aa6293f90dfc47cecd231a503df51664f3b38da0be1b3f8f9d334a570ff9d3b1f63c54d579e6c8ceb26cec417bd497a9c0b8ceb6ef668cbced464b44214f27dc82741ae9020be97fae7285c035d49a8bb82b5198d2648a8136ebf125891acf"]}, @name="5f671eaae6e2f436cb375e0ad30a9812ae5d9c0304e0a49b1a76a4263c3fdd031590dfe2b2567d869b10cf5d9c1bf743f10c6b912b60bf1a71730b1f9e2face26bbb32bd5ea3af0901acf739b7c763ec85e5b84a3ff1a3079101efd1c594443e45398e1e8a1fdae80f66c12c83b54495703081d7e27fe15b001561d08ece6e630f99bb3c28378c912e64c3dbd2c06ec1a9e0c6acd60f233689a215ad4a77e36bb2b3bc8015dac89d28692dffa3e7ba05108337f63ab08c77e106d12971102d37a0c41fd87eda0b7d210e30317d6c705916c899a1e73f220804c02de6fef8c6c638590ac7a91acf5380875c74ac5ed63873e5cf20b5ebcb0aa4f2405ae0c146c10e18fdbddc4c5394c86d413e9f12d8e606d1d0c5eb63b75dfa9c89cc0912149b64446fe8a2fc1465b1d3913e06f63cb35fc20d4a487bfd9575167e7b1e77d146cf04f4120468e98d6ef5ca1f834dfe182fe43fb9d7f0c4e44f615c213f01d41d5c043af059891509367eccb040fbe05d30de5e49a464220dd80640617be7880c894ded5674ca975657cdae7b882d725aa691babdc7d12eac4553d02107c2f9c59439f8cbbb1b24ce43ce10bbdc1c32a0de16cd88dbc675eb83ef7be70af722eac83f63417e804704459ff117dd2b8ba536277a7e8d8190e16406372fbfd89001f45317447cfb5288e205e3ae68ebe92ff5e87888224cff58d931bfae41c7904d5d8174f3a2433f915dd56a9767e4c420b8c4ccd6b0e887490cc4fa959156e894aaab5f194e7e3da2a11e911b2e56a0146ef23dff8d7b70e5f942e6a4d9b3df651f96f4a87cdaf189d1ac137d3c35fb4fa4b44a6f476a31bc69b82b575b16025e804e8f269ccc26901cad6c302bd814837bf8073ed1fe253080dba509f01dfff6ee0fc010a022eabe1da864dc7c722b7a18f5de19b734e409c963ed4caa3510de15d94f196076da30593d8d88e96aaf7faa4d8338bc5f23b5cf33a0d54f205b78da6d3458a7b5ae8451441cfe9d4e8d921b491745c060db471aa76f80e54b8e9b3ff163a2b51a12be4627e20aef2e9a39e1baffed539f32db2bf8b22e264c569ce3b1698d62ebe928c207316396fbcda0d09478aea42ebb20982efedca7951b65e5d79c4bb1bc65a8583df6780202b0fe5c444d465871864263cf059014f51dd96e78bae71a5ccef06d55b69203b0ec534aeeb7a99448e4957c1107f43e83f70968a27126bb9afefa29aaf7ca6934fc092f50137a89532a202ca67a7542407378c7eae1aa3be663d6041119abff2cd05eb9fb5a098c9eb75fd59c2382544db9fb7e0c07e381a0c252ff93827099a94d40c355922609255b2a91b65ecc89bd870b83e43ddcc1d2685a349ce3e0d12f7e8b5638b7d9bccac3868b92a597e6255a16e008a08c1058b63315c823f8ae58a6352cfaae2b74e3c658121749e9cde9f32f73da85bb09786d76aa3bb38e4b59ec34b2b13a4453d8d76c173dee3b5bb9e695e033d6f72feb3300bf8a45db07333a528c5f562acc419ecaaf8f6cb6509203a4527488c942abfa6947477e6d7bfe2512c2e600dd331ab4a8222c03f85a94fe4ad4bfe259ecd3d9426be6a86ed803a3afce3579220e43e40bbf2440892151c8a7b58e6a62f8c7f5cb3fbdc1a8cbe355e16b05ea6e25accb5c18eab6f35edf91f0f5ada4d6e37e28890ce81a5fb74f9d5eafc87c4e4db35c2b0b2aebde879c07cd8f527b2ef330b577d8fde78aa49e4003048b230edbe603e835d9a6d4fdd0266c9b174957fba688e12eef6f220a11a0730bbe2158c0f46180970214cd2dbf37bb0e7b130fa24f1320959f9f32547c689e7cf612421a2c2e3da94a1102afa6d1c6a2e609e2fa015c29b1333c8b89e84c01dff77996570b334da82f0a2b2695ce7a44f0020b44df00e5f2919a5ce4eacce45e5162dc6974872661f976a4bad19a09c42b7463c81d4277af53909af42735cfde4d6e8787a7f3727169c25003f46888876a802adf74eb3c48b59c428bd14f25eb02d4c3d47f09599a454dd69ee8bdc45a25ed04cbf49d38b1cf7db9a44b32dcdfac56381fc713a49b13dd59e2af59060021ef38e94cae86d602f4541283a5361ea3cd04821d51e11e527329cb181708eee5355ff53ebd07f94f84a500ce2fdf67f520d5f5b3065d7e5171c370c30c1f7f12a2a3f8834760141a73ae777bfffa11a1a21d34fd79a5d6f36c29efdc88eb83bad3d414828662da8d2be2322d3228fe59bfc5adbd88e8bb57cb22b1e4fe2c0a808389ee0e3e4816cb27b884cdcbfa74f31c76ef0b3813fc3b7b6745d81a3fbee40d6b54d6ea31621588c1fda6064cbafe6fc73b9f8a59b49d8eeb53dabc1502b5449d72baa8b3fcb645c9833e47f5e8dd954d6c7d3e9accb56cedd58e76a19973cc166ecfe851a018b3c9d4c3fb7faa5a02211f7f9cbf65b5c8d74ea395079bc105430cf90a7f8b4381b55c865e273b7944fd7bcd576daa168c16a5db2b5ac48805c5cc78e8919fe0fb3f0d20fa820ed8545b0cc09bd6f2af42e38592be248c0ccc03531e3c124698b129130d22bce8fb61f05755ae528bfff8fa4a7e488e4c8ccf954ee97551a3bd7d10c730df8c76a6c9aebb186bbb3b806128b25899cd3f47b0bb6c369fb6d82a79d53451570aeb2cd8447e508ed64b2b995477bb89d9768802bec5022bcdb39b6ecfe4ae779635d12628978214947c73173768cf6ca833c3e169c998c83c8df12918d39fdc9c0d7c4b9ba8a50850e206e26c5f51b88be6eae8d92d6d63312c661151d8a173d5f3fc50358bf5f54a4b16bd6d9a6eccbfab1fbecb3e61f74c13f54fbcff8372745409498deb006b7be84d9385aac50fe592bca42372670aa023465818e8f500175c994bda45d6d183d6edb69928cae454a8fbdd1f4fa9f94ca66f69e72eb86e9ed0e345ebcb67c2d82523f293d86d1422ddd7344a3c06db84557f530b7eefb467311a9152b29fcb93a317e74928de38cd72ac06beed781f650ac02662f7e23801c2601da66e72941d084aeeea994071d71d8dcfd0c7c5b0a3f0bed910cf77b69a7a19a636bc3fa802c01fc55eab6c9afa5009a53aab1de4ee22a7554a649af76b01f3898e27518084935813dafdd2cce61c90063aa9e7ee1e1c09bf66392a4c2d7e0260d7e465805f6ca7ce5729f2e132b90167a40c7627575fd4d8bb13a1ba87bd1be6f96bc9bbaceaa2e1a397bb98752998a6bb4794b367322e1717c3f1baf7c2270a10a1b102d75690332da65e979a8b29afbaa92d27719c8ab68a5d23498fafab1cfc9fec695f026e47b88ac4bf0a60d62751e4d6e64d1ba7d94e1a37954f9b21d5af189473859ae196f9e6a94979f037e05dca9b316a739e56f469226146a6c607127e884f12154da3abf4b607c50d8e6471c4ab85dab6b97402f8bbfd59d37e7d272676183ba3e8b9238e180603274aaef42031904cbf3e308d8e8bf910a11ab7605316d9206e84d008a3fd6837b3b2aef5c4c60858af0d2e482c55dcb712f4d5848a38bd3a49b55d3722c204c3b580c026da0f3234fbda76b205a0881703df29fe26210aa3cb760b408a804aed4a9e85b0913305489d14bab5437358a6f174344f6150e5956e149a77687c7da0e2ab01387d04e22e3e67e10bcf1a338b96db5f3bb09f7773875af750f82ae2f5ae6d765b5e96397d55522a463bfc381413a96313514f51cf9baf2c84142a1c280c3f454717233597cbf3f97eefe7c0a6123b1225339b1f075729387fbe4e77094183e557bc78d5f5817e35d2646354d8a9527930d88783abfea84d4c700cddda3007c9ba2d01fa6dbbf7f33713437f381db89c6194ebc53463a787596cc6596bbda7d8a4d8737be4e095e6c7eadbfe2a97d0581d6858e410a29df7c7889d2cf945e2c59c4a3bdcadf823c52daed85c7fdc5bb77c658312f354c039221f9f9bd920a81ad51c0b0f2c4a20c170db82ec4be0d42dac0212b898a1b1eeb8870f5a7436f8afde36506f019f2d7bd3a2b4a9fba34282e59dfe644ed60cbf0bfeb04dec8cfe7f6cb1d7f7d64760150bf2b3b1a0109567e1241942231f36f5c202d47161adba64aba705b783feb2c6f076ce21df4f1650e6f91afa8b27ff21a0dd86824bd0c2f6bb525b0dbb920eb495a208de26b45e80844426d7d764c837c096236db4aed0a35d06bfd59f53d8f76784055c79fc06b7e24ea186954f51f0d9e15cbc706ffd1667fdc55638d3ba9bf17bcd0dff32c5ba572d278590318441db7df1a00cb9fc421dc9ee339aca16a0ef8386f6ff78c309eb1262777f96b1465346b5dc83ca8a50d8aef5cfd132844dc7ae18b03cf4d7086debf52c7eb01a28646e43b99ffe8fcaf1730a6b67a6cff91b0d64c76d690b7d3917f48ab8b6fd659e96a6775f7c64695df5d0335f294dbfc4ac87c750ccb6fca68dbb7bc24d52a0a08c3ca1fc3f9546f9152961df37d9eb39355a7a63d6e10ac6fb8d9b259898292f6df36f038a504eceebdb4938f2090bf0bb101119262ffda65bcace9516895facbf85fd8d942bb9de1a7da32c298f0e72bccf38815d11e3f5ad588f704f805d0b91a12e68b9414ece058338528949d0e0c1a103ceab81224a021ccdae620b3a5a40f2d74f82171d77cf021d070f6756a53fd1c9495e322d1aa54d993243176310fb60602707417e37ec0dcf327689e95a96c6edf93c67ece4c4732a3379baddba8d07846ee3cc7ce1e067d90d1497e2133f6d6e517057ac324a571b0e049d9682b9395e0d4f2fa8c774f3a182dc7c2b1477f32654ba34e0cee007c48720626fde644761e7f9e68b18b29de8c6e30ec27c22788881d06c42480bcdc102902692734990cfb15c85bf40166a8e3a53136ccbe417ef13460d36eccc4f2a1f45b1140aa008fd9e17a69cae7d52a115f52b94516071250e23fb0cddf75ca1c2631f5111472e30e53cc2bd8bfb64db8d231670d3dab3807e7f0a2847e8000e6052aaeaad6643edd391a13d75a510d85fbc16a1dc621f198bad029b619ea7d981d04627edc9ad86781a019033da7aedec0b3a7fe81657da5d2ebe23ccd873a31f846763cab753365df653cee9aa1aacfdee14ab59879b06b6339e24a90965f80b9155725f05e079274eb27476207ef2e525a58d1908b039d6d1591abb2aeb73373423d071c95376f1de0b0c8fc4b0d9f60b6e2a1df7148355bf0253770ede1c99e00c7330c0dc1886119a5eb553773567d28a429fd711fd38bdd9bfd735a0234538b8b203725c766b77af6b2bbdffaf536c0476c0916759c954134c2a6af815ee6895cc218e016d65a369f42206593cd99c4f58876bc29207c74689b818968973264d46dec74ab70bcecdd81422313801695e9aa5be785c14038e48993f74a5eee91bc3606260acadb666e1b6df42d40310dfb9e4bc012ee48afef73e8c6aea3c6c6846118944c0949e7c8c295011c62c695447246cba21e1df199dd10678c90e09286fec4c5eea89ce5016f4ac266d0772e8fab131cf2ad75a7bcd19c3bab035fd89b5887a69d740184f9007c8fa1ee9c11d7d6637b74cb358caefd002eee352b0e928b7257c8267223be334dee7ec3030c31fb39d2e2d89ddbecda80c6f853a05680cfbd9361e4d6766a134cad623ffc163cd29f699b0309f577e4b338187d0b6dce2da08f24f52b0e02cffc852bef8fd2b12ef9916833ed1e6b200f0c85ccc002ec2a1173a74ee8d87879f23a7d1dd"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000680)={{r0}, r7, 0x8, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x10cc, 0x8000, {0x0, 0x7ff, 0x10001, 0x3, 0x2}, [0x5]}}, @devid=r8}) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8) 23:20:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1b01000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2810.005848] loop5: detected capacity change from 0 to 264192 [ 2810.006951] loop3: detected capacity change from 0 to 40 [ 2810.030844] loop7: detected capacity change from 0 to 264192 23:20:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) 23:20:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1c01000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2810.152465] syz-executor.3: attempt to access beyond end of device [ 2810.152465] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2810.154044] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2810.191713] loop5: detected capacity change from 0 to 264192 23:20:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:20:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@posixacl}]}}) 23:20:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2810.269991] loop7: detected capacity change from 0 to 264192 [ 2810.285313] syz-executor.3: attempt to access beyond end of device [ 2810.285313] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2810.289167] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:20:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x8) write$P9_RREAD(r1, &(0x7f0000000280)={0x98, 0x75, 0x1, {0x8d, "73afebded49a576d42a3ac413b8e0edc506d4f7e9790a7cf9a261d5067a9e787d0ac424282b73e1ef02c678920308aa803b3103340d4bd907f35254363f5ecd9c22190f97b8148a1d333a34260d8cb7e5296d9d975129a92c927ea2cbb07a611ee9b7d24e597f7b1741117ff33244d5756141b89029b04be0364a0cbbfc79983cc381302f2fb75a9a2eeb7a873"}}, 0x98) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:46 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000840)={{'\x00', 0x1}, {0x8000}, 0x2a, 0x0, 0x0, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)="02235dc206d956aef7f27faf70bd59a1044781528519ebac618f234b5e4d1b5c717655a80e96ae0b078fc68cc389f0923097ca539174f186ccf6c5929054d0204c27b3125d3f0116842b52c4362e3f69253d9f95b9a49d926318693c110e11e89ffa229e7b11f5c3303161a8c7a31eae705528db3ec048271bbfa80cd3afa98ef7bb80bad800eae76025219204ecc72dccd323050a53f9cb9be6c73f26022d8b8a84dbdf44bd8045b454e77fd0896f7e9f114669d5ca928b45b5e25c96b14d00f9021884c242dd07e8907de1bde3f3aefc3da42de6fb4a6e", 0xd8, 0x0, &(0x7f0000000680)={0x2, 0x183, {0x0, 0xc, 0xb9, "49d87dc58c79548e61711b1e11ede1578b55325c65b43f97632145159db263bcbf885e62d4d0bdaca8236ff2acb4b699f10495615d7e9c5cc94525409aefa03998dd28b3a81f9b4e547c7b7448db245d594511073c20fb1187e32d4cd91fea4e0604d983e36b41b3e3035bb5c8918d1f38b8b56bb7715ff04ecf3868c4b9adb577ab0e91598226dbccdba3db1ea6f79582820989bcce40b72ccb876129d7b79c67e52fdb5ed7a4a5b69ff73c952f376b223943524a7b8e9627", 0xbd, "a62d5a4bf0efc0ff9eedf96c78afdcc1775c1e8279a90a8a2104c0e3f6bcf56d66a31f585efd165f32ceea96da37867b20423e535035a6b51fc6c893bd7e3ade861d6db68bd06ce8ca65f4a6311654cfa49b35fde2e0ca127df7f2d9ce199b3fb3617f3112e9b049a1361b9e5b71e93044f22c00e4834ac452cdebc9361f85714be0b319e731dcbf2b4c5ef8364f516a147f0d57a11d241252d832df2c31ef2821e82a2a205666c8f4f7fb46c7a735411377ae54dfe34e60c7ca0d37bc"}, 0x1a, "be2fcb4dc5dc215b15787291c70ee7404ee7d981124ebabf2c61"}, 0x1a9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache,cache=mmap,loose,dfltgid=', @ANYRESHEX, @ANYBLOB=',cache=loose,cachetag=,uname={!),.{,measure,euid=', @ANYRESDEC=r4, @ANYBLOB="2c61756469742c61707072616973652c7375626a5f747970653dc0362c666f776e65723e", @ANYRESDEC=r5, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=r6, @ANYBLOB="2cdd"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x0, 0x7fffffff, 0x27da}) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:20:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:20:46 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffd}, {0x0, 0x0, 0x8}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) fallocate(r3, 0x40, 0x10001, 0xed9) r5 = epoll_create(0x7d8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000300)="d6260351790dde36d93038499a055f7b8c27b1d2400446235fd512cc753dedbe7c67cc043fb6e95bd1f686ef4794c7530fa4a0b5ed8c5228f6b0fb985839e7c033c5471e1b2b314c930e03e051bdbdbdac519d1b4d84cbe44730a74dfe311a6576a8a4f9e963456f7108e041f21a6c2400fd4ee63fedc599436a30ba816e254103c82e04c5dae9026192f3fde4957cd4cc424b76a8ba32a9510b498eb6fefeb3f200d24df3b5a408aa0737c8ef0b5aefa82a3340ac703836ce1671acf8fbc0db10cccc4d175825dd180646e03b7ffa1ca21bf374532dbcd518ed426628288f6a44f1247c50ef68f2a21b9ad1e23b2cc0db7c8094daae9ca9c4aa49f1", 0xfc, r5}, 0x68) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=@sha1={0x1, "54d8b89f99ddd7e91da7aa5c9835e8eba7196b7f"}, 0x15, 0x4) 23:20:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000000, 0x0) [ 2826.146303] loop5: detected capacity change from 0 to 264192 [ 2826.153295] loop7: detected capacity change from 0 to 264192 [ 2826.155282] loop3: detected capacity change from 0 to 16383 [ 2826.184312] FAT-fs (loop3): bogus number of reserved sectors [ 2826.185265] FAT-fs (loop3): Can't find a valid FAT filesystem 23:20:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffdff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000000, 0x0) 23:20:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:20:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:20:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2826.291250] loop5: detected capacity change from 0 to 264192 [ 2827.011596] loop3: detected capacity change from 0 to 16383 [ 2827.014043] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 2828.162443] Bluetooth: hci7: command 0x0405 tx timeout 23:21:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000, 0x0) 23:21:01 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:21:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2400000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0x9, [0xa3cb, 0x7fffffff, 0x8000000000, 0x7, 0x81, 0x5]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r2, 0x8, r4) shutdown(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:21:01 executing program 0: timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x200002, &(0x7f00000002c0)='\xff\xff\xff\xff\xff\xff') rename(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_create(0x6, &(0x7f00000004c0)={0x0, 0x14, 0x4, @thr={&(0x7f0000000340)="fe5a23502dae5ce20409b1d2dc0fa0ffa1f91fc09ecc920a2c8c740ca2b87ada04911337182da92c05b14a46ff489cbc7c5496d0b191e8f890b4e090509b24ffb1fe7cf44940d4c5044b195e6da059be5432c21fde65e15d1d74351d7813ab4690af7d91e9422e7b43de7223e762286c3beac8134ed0fd", &(0x7f00000003c0)="2a3af138b24dc58d5621d88ba46afe962f07c6529aef2c30772552faf86b1d4c780f3eeefc676c7ff1f1ab216f7100ca2a2d4417c330e12259a19f26887468709ed4de5be6876a05af82c2ea27494b6917311880e6e32ba6eab2bf6e3a9ad78336e37d14f233123bbe6530aa6c3a7011f5421167271aab8070d1d054db5afea5b4109f2243d1b5bf49e8bf35fa07a310f4e327a13be1038c34e30705c52a65a3a218f7911831f5eff0e093001d109488395e9ae1e27de3fcd5407412739c65e464ec856e5716094c719a183e42b0d9097828b389"}}, &(0x7f0000000500)=0x0) timer_gettime(r2, &(0x7f0000000000)) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="156f"]) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 23:21:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="6804b71e449d72bb44bb3378270763b393f42c5d9aac9bcb7ddf63ff1427ac22b4df560468adaa4044de0b8a3dbf10200af26771696f54cbdade7076e80eb0be7e4220e67ff1de7a2623fb284bc573fa4b70af130c601363949a3dd350f957f4525873291e1c49eb86ea", 0x6a}, {&(0x7f0000000700)="8ea6af5db5a5dcb232e06a8d40f0031c89604dd23a8f38824890d67098c3f785b86055bbae596af285ca7cc32a8b0cbeda48c3e8f65111647f911e41f707fe6853c2f23034ec686860e074cde987315f175439a8b200cc436e1cdb2ad5f1e08f4b7b1aba974848ed6a83f1949b8e54463500ab67739e3285d71283cabbee79fe4e34ad2ea085b08cbdb5674b1a7ede9b531270039ed735c46d0bf9381b8ced188af7b5dabbee65be167f08a99d7ca8758a45c73f37d23a74c0d34b2d366945e408398194810a55989208181d935120b4af1a9ad7d6a911b63d5d1120b3970f", 0xdf}, {&(0x7f0000000800)="9adc25ec7c7fb5d9ca22408f7ad10283402357914ed0a203c18f4b146020f621109a84801c8d3b0052e444b1e9d3421d314acae05e47223bc85414e06aeb87f8fecc04cdf4c5d47903d6008b4f83bfd00abdb09f8e4c098756b6b628c7a6f57f4f98f6c7e98f6bbe4bdea3d8658ab239cff212fdbb03627c17848f12f72588ea917bfaf55b97819b4a6f67d93b1aa303614521c4f32966cc1b89a375d3203551b4b1012f6391fac7fe413a6e433e3d8c67c7491530ecf8e098b7b48a8ad8e453993d8f36d5196ac9ca7a6cb2dba85734c131d69100c4d29213511da832ae044f9c72fd6a7b", 0xe5}, {&(0x7f0000000900)="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", 0x1000}], 0x4}}, {{&(0x7f0000001900)=@nl=@unspec, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001980)="6e9a0e37cd257b221d6325418779", 0xe}, {&(0x7f00000019c0)="a212b6bd12ded88baf0bb8cb86c8fde28593a93a028d24f5d423ca599b0ee9350ac3518193943a4770b0900b40a6bc085831", 0x32}, {&(0x7f0000001a00)="0a7ab5fdcebcefc1254b3622983c01d313fb99d62f921f2e6b3427879bc6f5697878799f", 0x24}, {&(0x7f0000001a40)="68ac048f77b31472c4d3ee8185321bb3ac1014ee5e31a379b863228a0fcddafa6f327f5b3b0a43d440cc153f229af0a121", 0x31}, {&(0x7f0000001a80)="472c118656f63828f8efb2e0239e99312e45b8be6ccf7d0767798811ec85b0a53909b0e5c6b3aae624c62ab5bb00493b1ae9a48b432f00fac1d9bcdeb4979f562af699aeb5d362c98c094f69f1dd727be4f28ded628f22fabbc7e6d67f5bc6ae192acf3831a85bbd39dcd59d1dc047f20e6289f21add475264bc4a021228daa8f05b536704986e60386be4", 0x8b}, {&(0x7f0000001b40)="c820d51e9b309c3b6572cf97f3ed8e274504aefafb61daef19b2bceec3bbda3c25cee03ac5223798fec7d81cecd7f09475e532c3970b5121084e05f9099b3c485f0cc4f1d67a06ba4b4416e1c3096170e9e6865d7e179cf3014cb9a629ac183affd5a19e33ed05d23c54d2a09607f52e6a4baf2e7d99a5668c46c8ea95063d36f0d1d2ae6aaa96262d01eb9f955064a082545904b42372dc15b9d384b9654c929b55f584873ccf7be33a770b4397da9f1b096ed3ac813f170373043f300f", 0xbe}], 0x6, &(0x7f0000001c80)=ANY=[@ANYBLOB="c8000000000000000401000004000000851f388d52e804cf21b4152ffeea7496e996ac5ff13c7148be5876848a850d00debb2c3b7c8c228d360c311c838b382b3df90bed29e1e4155699b2688d54a8f7f4f93329ec49ed7976fe71f1b4f13d0bdb14db000000001a45bb6cfcd978d4b8fc95681fe9aac0dd1808ea9e5ab562ec1aa365d4e6c617f7e980aaea29adb859bec59064392ae59f6e2bd9082bb01f68e0f4aad8df11acd63b71fd4ab16a52d543570654a057f87f8739580000000000fb27e39db5"], 0xc8}}, {{&(0x7f0000001d80)=@phonet={0x23, 0x1f, 0x7, 0x1}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e00)="d3220e9fcdedcfd1fefd6830f9076e7679f7605e9bebee3765766080f98699fd3f9ff105f2085106b2c95afb5614b2a8ec4d5557250df5e052d2fd4894f51bb53b53f3055ec6656542d62684174987df21e4ad0652ed1efb83320f96767af8a41f2a2e71a9d42b93772d84b8a60c31c24f611c7e4d12e81bada38d800cdaae054e86ca56e1b1465deb109b672de00663580113aeac04f2b2943643a98c2fea7eed1557", 0xa3}, {&(0x7f0000001ec0)="8e9ab22966dbb923660b23c8e6ac1a1e371cb58eae8eb6734b518543588ae5233e28a74e2c5a00033a9ec8146d9e80b65ccdca865d4f54eea539ba01c589f860c0058ca777a32492cb77d8eff7475f560f6680eca22596507bf78072b5ee055c7ff6460bd17d22694413aa8e6d53b5aeb1d9326fe64eb6578585126df8ad1841149a4fa075362297ba860312dc46d8939f59fbe133a6ab84914b4d53da9b2010a2fc1e88c3cf1a4260c64c6181f5f1fe5b", 0xb1}, {&(0x7f0000001f80)="587add1bfeab52fdfa66d9d6a6844815cd658cfa0134749a0d69e8b518c26e17488e277ab8b30167648f838c43f7456af0578a3bc00cbf2beca10a66d07feb3df99f364f951c9357eb8844969b9f118573b4f14b876102779a6597906dbad62fb58968ef2f9727a6541ed85718420adf7093a40d0cfdb913980181d91d715193981ad376faab8f7d06aaa95cca374ac5fa626999aa1235937a9a42f5f52924755238803c9ab61532a559337af9753b67b2ba1d80d126e1aa1f6d48c4210f5a8036b61d90951d1bd63e8cbb95ea0ff17d15daf88e379732e9a96aaa62f37fec24e3cd3c", 0xe3}], 0x3, &(0x7f00000020c0)=[{0x50, 0x88, 0x2, "45c08996b4e2f9ee533d117a1a666e8fe63b3db4e633e85a014ee2c1cf5ab3321352824c9278a2b25b9551c80e0cfaa995c7eb25f841d466a000713a"}], 0x50}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002140)="a2d923a50057bf8a9d796d96ca43b2844ca6f0fc60b3314a6770cc135511c110e9be2eb600405d3e7663921ed1211ce92feaf0a78b31e8443ac324e5e85ae85c959ab17ff84325a131c073c5e698607c6d52125a83836979b3c8370882ecfbc5fadada52aca32cb2af9b0e5e6e8d6f8791541897278d2a2d4bd08fa7528b510b5ce647bd7efbdfbf786a96af04e9f5692e68d157693a34049187ecc95e86", 0x9e}, {&(0x7f0000002200)="572f5e328874bf431763b4964ecc69c99dc7f199f772a1ca6b677f2664c8075f08ee100176caf96c79cda4e32962dc11058d3555afdd599a917161713f0d08a481c791c255adb6fd939a01ca9a80caaa08d2a4e59b5f74d666635ead70dfb75fa6acfb53b1ac78931094b6acc06fbe23342570f8dbf2df9b40758b1f8d13cdc6ac6c3d5ee1a82249c32696f6ae8c9f2ce86981b4faa637151ce7da349f87a8e3311f6441999ad1f9528593fc30e80fd64e4db3e65dd3a82e74b7", 0xba}], 0x2, &(0x7f0000002300)=[{0x98, 0x103, 0xb0, "4722467b8c311590f66daa982c71494b3a20e4e14261d219b51a0ec2f2c1beb98b65d70814b9fa8b7e6f64d21ab71790ada18f747d99763b668a6a013bb6deaef83d5cf6a0aeadb403bfdb38331d1b0d4ead7990b1350373b0fd841491b496c0958cf5799d4944fabf0443a7d0fe7365ef090b96e47f5ce22b6fdf741d261dbca0cbe2"}], 0x98}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000023c0)="e36700e2694ce7a38b7edf757858e1a0048d8e060ad6c9e55083903e1c2e97b72b7fedc716dfb7071bf2f180f955d7171f5f4b180459b5a6e31b05c85081ade055975f308be3181dd9c90a010febbe600b331090f8002329e283ca6673cedb73f4cbe1990c0cb41d115d10cf8be8faf34e0aa6e771219c0b81fce25a3b92a82abf85b7ba8ce4ad979d34088c75f04346f6ad08d7a2d4db690c4200ca714bc3", 0x9f}, {&(0x7f0000002480)="f7062d84e39e73c0bf64a953ab0a77b389744c788a569339eff1ebec8896ea0ed37bee7e15b67a2a57bc9b888707b06308eae3b92a6cbd3be917438a1b0ad88aae41dd852668e7174684fa2f", 0x4c}], 0x2}}, {{&(0x7f0000002540)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, 0x3}, 0x80, &(0x7f0000002840)=[{&(0x7f00000025c0)="aead0985ff52bddeb182c898d16cdbc02581af9b39d94b493f1620d23afb0030d0763e490cb54b989e251da7b8a249e63390ad5ceb4554ce92fee30d6cce3ca4b395ca171823290e6cd2493ea2ab45152e1f7d1ae77449d4ab17bd6246a79384675e6482d6536381c5197ad7c6a578592d1da16bcad2cccef3", 0x79}, {&(0x7f0000002640)="eb29fd8582b297282a0e0fb021e7ffe588a12eda034f0a448e4cc0a7b85e59c4faf15440ecbfbcb69eabc9a9aea36a2802dae6c9007f0a769ba3a9ce3bf8a05ff1d48732a3c02f43866928dba8194b5b1c5a33475b72c638fcf6b689d12b7ef4b2488f79342ef44a519e", 0x6a}, {&(0x7f00000026c0)="5c3f36199a7d700096108b3fef2bff7f85aefc1b111adb7ed817aba468709b764e4eb9a396e5ca575da647e1f6f36b8b6685887309a0f9db33d05d15ca8b804db2c71d574e8db5c6910bca3e855394dd98e421eb6072485a997fb6688129d42a742a52ece0eb63c16f3696f9c01953a7a6712ca5a38dae6215c30898c7e9c22d8db8c2f0d4ad9e5a3144b40567917fb05cd0a656b46c8f39e525bc5dbc52c624cbd72dca374201df38597a432fd76032cec7547de8d1babd1c6de40d984dcf9376be65f80a814c4010e89f3968123c778a165ef3e473f3d6b49d1cd3ab7334b735ebee6997bcf8543fcb", 0xea}, {&(0x7f00000027c0)="c4636d51440ae0d415bf2c080a646c04822c79157275a2ba1f314e0f98008c5169ef96ad1d808211a1aaf5e335834bfe54d5532a9025afa5866653092fabe494595b87ffe438c77711d4496d14217239b28ef4126e35eb7cf483b2059f8d98ffe1ce0b69bd9fa80690", 0x69}], 0x4, &(0x7f0000002880)=[{0x20, 0x6, 0x7f, "c7bab164af73a96a803cbc59aebf"}, {0x48, 0x0, 0x9, "e8b69ecad6703f42998063b22f11b1fce2e41128d94d5ff2bdf1047e14987a506950002fa4ce048948a09aa01fe6411001b28ae5c5"}, {0x80, 0x113, 0xb54, "3e44327b0c6affc2fdffd93b365559576df9e751d9050d8c8fe8aaa492bff29cead755f161dd046c3ea010771f68eea07a66f5c6a0d618661d3fabeb67f6c04f19e54b6d36cdab0faf190f364d98b02cac3a8bd3da6c66f7fa0cf00ac536ac56fa189200d6205a69daa12a005a"}, {0xe8, 0x115, 0x94, "2927834cb5140c700274d35a0093fbbf6d470fa5111729c384b97207207e7af528b2a750f12b1549cb2b4aa0d73a267791014a7839e20e8589d273666b343ce94593c81053db1905f78a0b125156e1cbb1f7b712d62bdb222a315cf8b34b39793fe5006ec7c66e645edba06bb7414aa6cb0f1f63b9d6bce5dec889efefe9bbe8f4399e9daa912b87b559ef59c525e76a9d65cc404932b7c0e6eba3a8b20d8d7160159c44cf1c42199a869f13c9d9ba2ae91aef599726841c9a342698b89170fb778535337d2441669e31ccf36a0d5a68fc780466ab2597"}, {0x48, 0x10f, 0xfffffffd, "7c1b5a31fefc40b04a39d377e8433b1cd9aaff9ebe9372a2a85fca05ce5cb056c81c2e7c9b2984c5b9e2f319b62f2b69f3348c1fd9"}, {0x100, 0x6, 0x9, "76517411169a553d9a2be8a9db9eab43384aa8dd429505df7949cb22e8dbd16c7436cec43736e3d8b462981510bba33c4ec273f5e834758df66e44dac968b6141e0bd88510de6a163c9f92e42f3fbd2c45858d07c6a83c6fc7994014bdd1b5e0b70811453ee009aa4818ad10feb1769959e81247141268440e07af56c67f817b6959022900d18297572ae54133703fa171c79927b32d6af3e8e691d0bbde383e82943fc3e827b4c16838b0e1582b111a5ec7453530ae262ba60a11ef71e94ffea6c876041964dbe1c7c07dc176b37da3a86cd174b19ef7e3918a4f465f07d1eee0ae989c9c8896e8630486"}, {0x18, 0x10b, 0x0, "1e"}], 0x330}}, {{&(0x7f0000002bc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002c40)="38bebb4a8a85894a84c1c922c3ea243dc2d4e11074984fa1d6aa9c4efd8054333dad97e05069268cc37dfc6dce07f5b905c6b1cc3ee4934ce8e4cabf9b7888025837e960506fd7d588d6fd24c31cf0aed363248944bf105e24686fd49576b91d0f7467ba68707a3b3462b72b2f41f454c46adc1dae83e24de7f60a62693ced611a09f24f21590638913178327c302e0522fbb3f34fdd317badb025a1e08e6095188c4694549dd21b61a9485de64e1680cd057c4b58289a9c41204bb9fb71d760b763801bffcf36d6db87b4cbe711a8bcd94ac7856f738a4ee7139240", 0xdc}, {&(0x7f0000002d40)="b7cb397d82a454290189f0ebdd3a46bf21b823ca0ffbbc17d431bbf5a25bf2554d359533eb3ecf9d55c2336edf7e7d0f8c8b8472ce0c3d3b0613f1f7463e1d1b233a02852b4a471037e411c675f9fd1f13c6af4f40401a6ef4e874d3c48afd8391e28a8b6aaf31fe497c134ebef428976172368aa23e8b458090744c4f98d5328a0410fd5071ee9aae0a68a0b97c73b94e22efedb1868a59560ca1d7eef9f4792b389c1e3fb5c4949df02445cdd55e2522d6a7ff6194fb236feea650840a01410d6f39385285340c7138daf5ab2ee85409d28854dfd4685aa4d14261516f2c8df78a784d94f869264b13db7933cb", 0xee}, {&(0x7f0000002e40)="c9fb7288cb5695b55856f00ece1011793e71a1f16bb1a6fb8e898559d915ee1b21bf216414750f0739c873801dfd2ee6d57a8c02bfdd1543e64c19bce890220374603b3efc2e4187a5c1d93655829673686d4b334cceb4ee83b79a6317b2cfb91a1d940f7a91a61709d3f2750e9699a8a9af1354c6a351b263559c49f595cb7a9201d4f1faaa8c3540562b1fa8e904d0202e811428c7d5c94259960f39bd12f55fe52171e8c08f7059a6b79e3ad1a6f7fcbacf3e1aac171dd3080ea6f5efad7ef2e9695c2448117c82bbe3e1465e607e59bf0850d16bd1ab45ecca14a1fbaf147093c27c12969231d9a7", 0xea}, {&(0x7f0000002f40)="e805647d3a42bc504fa38e07896d9192648051616695fc18dab60d421d3de370b9a3", 0x22}], 0x4, &(0x7f0000002fc0)=[{0x110, 0x29, 0x101, "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"}, {0x90, 0x110, 0xfd4e, "cc3755946d8009846dad45ea25db0e642da15f594e3d437d8ffc4727de5b8b63b312d396865c2a087439e6bd4d51a58d32dd65d158b5a9bad5da7d4791a3e95d74ff685bd159777ee160215d6c4dd2ab258770d09c8e218c5a14fcb5ae73abccf97c75cd2aeab48ccc57767eec26215fcf8715e0885e4e57614b04e9"}], 0x1a0}}, {{&(0x7f0000003180)=@x25, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)="2cdefda1c6495c065251a0559db787fd0efa6a8cf58bfd6010014675962a4635018e1dbba0c2b3ab3c04552ef0c32e6ef313", 0x32}, {&(0x7f0000003240)="4fc31a58d3e3bbef22c10eaee00236f98a0fb0e02dbbb6a27420fcc8e69847dfccf4fa1d9e4351199bfba4d333e223a906755ec779b93e846d56328b82a257dbca94d228fa6115693172a31435395043ef4b61b18668974bf68f1c957a182f2a5780b80de80bdb2b824153a1c0b7d2", 0x6f}], 0x2, &(0x7f0000003300)=[{0xc0, 0x105, 0x0, "8c6e0a36ff98045ee7ab70c1d68afc559d77216e5f191fcad02efd6ba858e68dec704651effa98a17e5f50ed580b4795c9f4ad8afe9c40e45c4e1fd64401a9e7a0de913ca0d9667d8590d59d44a07a39b54cde86121d46202efe9e032c896ba2ea0ef05d6e2079a2536897dd3cbdf19801930bc5592f8f9119f7f7a251f8fd88cd01dccab0a02c2eaa5d4d262c0d116f03d97ef130e8c269c1811a658cda379e0473ffc54beedd9a9b675b8bd0"}, {0x100, 0x88, 0x20000003, "6ea0bf6002b5f5df127b7fdd33028f165e592087d627e6d6c29400f7706aed275fb8cbdbee720f3276c91a9c971e0536c2d119a3fa34ca16cfbbe7fb639504c555a7626c06295e787bf52ba39b00411c331b71638729728abf9b0b1455f7ab11aa906f9684036c66769d919400fe655a9c96078491d829626bfb9ab53077cb08fdcf1fbfaa3b954ec424c63bd5695928a3976e21b65ca02cb15bdac54f8af27ef3af63f5a7f5f94a350f90c92518b506a3942d67fad48601ea844a2f4dc9bbf324c7dbd8687acadf7df21690c073cdda5b8a956cc5cd3cac8a5425775bb7d7c28bfe31722eaf8b5c68d14ede68"}], 0x1c0}}, {{&(0x7f00000034c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x942, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003c40)="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", 0x244}, {&(0x7f0000003600)="f24fe7ac30fe293f377fd6d292991052ba14ed5aca9c1f47625d718318c83073c15fa872a0a08e5cb3b137a9aa6cb1c67623", 0x32}], 0x2, &(0x7f0000003680)}}], 0x9, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000240)='./file1\x00', &(0x7f0000000500)=[&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='/dev/vcsa#\x00', &(0x7f0000000400)='I\x00', &(0x7f0000000440)='vfat\x00', &(0x7f0000000480)=']#\x00', &(0x7f00000004c0)='/dev/vcsa#\x00'], &(0x7f0000000640)=[&(0x7f0000000540)='++\x00', &(0x7f0000000580)='\'-@!%\x00', &(0x7f00000005c0)='/dev/vcsa#\x00', &(0x7f0000000600)='vfat\x00']) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x109e02, 0x101) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000003c00)) write(r4, &(0x7f0000000080)="01", 0x292e9) fsync(0xffffffffffffffff) [ 2840.776029] loop7: detected capacity change from 0 to 264192 [ 2840.788056] loop3: detected capacity change from 0 to 40 [ 2840.814113] binfmt_misc: Unknown parameter 'ÿÿÿÿÿÿ' [ 2840.818917] loop5: detected capacity change from 0 to 264192 [ 2840.822863] 9pnet_fd: Insufficient options for proto=fd 23:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:21:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000000, 0x0) 23:21:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2700000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:01 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2840.876461] syz-executor.3: attempt to access beyond end of device [ 2840.876461] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2840.878103] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2840.898031] loop5: detected capacity change from 0 to 264192 [ 2840.919626] syz-executor.3: attempt to access beyond end of device [ 2840.919626] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2840.921186] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffff0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2840.959386] syz-executor.3: attempt to access beyond end of device [ 2840.959386] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2840.960307] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2840.968541] syz-executor.3: attempt to access beyond end of device [ 2840.968541] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2840.970077] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2840.986150] loop7: detected capacity change from 0 to 264192 23:21:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x292e9) [ 2841.049555] loop3: detected capacity change from 0 to 40 [ 2841.097586] syz-executor.3: attempt to access beyond end of device [ 2841.097586] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2841.098568] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2841.106703] syz-executor.3: attempt to access beyond end of device [ 2841.106703] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2841.107650] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:14 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x20800, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40200, 0x3a) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 23:21:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(r2, &(0x7f00000001c0)='./file1\x00', 0x24f595267072eec7, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/../file0\x00', &(0x7f0000000300), 0x2000) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:21:14 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:14 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x101, 0x1, 0x0, 0x40, 0xa7}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da9a88dc096d9fb7295bba972760321aa4f04b538f36e5bd7abbfdec009e1a983d41796b1f213b8d65936f73c1a536b7fc8bc8e7998e6749291cd618764450c80d902b6de26eb6108a0fb3f98c49e2aa9750365975084349f95dd8dd4382c2ac38522537989e473003cb7a5cacb48687b862bcb1d0222660d747500"/148, @ANYRESHEX=r0, @ANYBLOB="2c77e6646e6f3dc29a75676c242fd1a9d080cf15e0a494ceb6dd9d6b10a5be2c3c29e89992", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',fscache,uname=,dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',access=client,version=9p2000.L,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',euid<', @ANYRESDEC=r4, @ANYBLOB='F\x00']) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r1, &(0x7f00000001c0)="d16edd6c2042e69562922dbb099b62c50d5142ba0679a303c0792752e5a5158227ec", 0x22) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000480), 0xffffffffffffff91) shutdown(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000200), 0x8) shutdown(r6, 0x0) dup3(r5, r6, 0x80000) 23:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2853.629117] loop5: detected capacity change from 0 to 264192 23:21:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x20020000, 0x0) 23:21:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2853.638804] loop3: detected capacity change from 0 to 40 [ 2853.681978] loop7: detected capacity change from 0 to 264192 23:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2853.688917] 9pnet_fd: Insufficient options for proto=fd 23:21:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2853.736870] loop5: detected capacity change from 0 to 264192 23:21:14 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x34010000, 0x0) [ 2853.750483] syz-executor.3: attempt to access beyond end of device [ 2853.750483] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2853.752294] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2853.773244] syz-executor.3: attempt to access beyond end of device [ 2853.773244] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2853.774178] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x0) 23:21:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2853.811616] syz-executor.3: attempt to access beyond end of device [ 2853.811616] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2853.813546] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2853.850740] loop7: detected capacity change from 0 to 264192 [ 2853.852943] loop5: detected capacity change from 0 to 264192 23:21:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2853.926320] loop5: detected capacity change from 0 to 264192 [ 2854.504150] 9pnet_fd: Insufficient options for proto=fd 23:21:27 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xe0002000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) connect$bt_sco(r2, &(0x7f0000000280)={0x1f, @fixed}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000180)=""/100, &(0x7f0000000080)=0x64) 23:21:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000100, 0x0) 23:21:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x40010002) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise_type}, {@permit_directio}, {@euid_lt={'euid<', r2}}]}}) 23:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x0) 23:21:27 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x37ac010000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x600) syncfs(r0) write(r3, &(0x7f0000000080)="01", 0x292e9) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000300)={0x1, 0x5, @status={[0x0, 0x7ff, 0x9, 0x0, 0x7fff, 0x1]}, [0x3f, 0x1, 0x4, 0xb599, 0x8, 0x2, 0x7f, 0x7, 0x0, 0xa2, 0x5, 0x20, 0x5, 0x80, 0x5, 0x5, 0xf1e, 0x1f, 0x7, 0x1ff, 0x80, 0x100, 0x2c3, 0x401, 0x8, 0x21, 0x8001, 0x2, 0xc3f4, 0x3, 0x400, 0x4, 0x0, 0x151e, 0x35b2, 0x9, 0x0, 0x7, 0x4, 0x1, 0x7, 0xfffffffffffffe00, 0x4, 0xd4, 0x4, 0x100, 0x9, 0x100000000, 0x9, 0xfff, 0x59, 0x8, 0x7, 0x9, 0x2, 0x7cc, 0x2, 0x82da, 0x7fff, 0x7ff, 0x7e, 0x2, 0x4f576209, 0xff]}) 23:21:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2866.841158] loop3: detected capacity change from 0 to 40 [ 2866.843192] loop5: detected capacity change from 0 to 264192 [ 2866.846482] loop7: detected capacity change from 0 to 264192 [ 2866.871566] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2866.885872] SELinux: security_context_str_to_sid (root) failed with errno=-22 23:21:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x0) 23:21:27 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2866.909701] syz-executor.3: attempt to access beyond end of device [ 2866.909701] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2866.911515] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:21:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xf6ffffff, 0x0) 23:21:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)="2293befa2b5223f8be7218069091d691494bf026f5272d0a4e718a03ddb152485c5ddc844889ed50022c48ece88e1aa60254af", 0x33}, {&(0x7f0000000180)="d478551d7582269c6bdd882ddf4d04891c3b33379d9bb2ced65ed1055c3d5e0ebc88266d649e70a91ac02f13d98f61f99945ad1db0307d8b5ca29bf52e97a3cc42eba620ee7772629058cc52bb9724518da6080000002e0f808d6a770933d3a02849d5857608b471a264ee353a82e1fd82c0ed14108c34ed71b5bf101cefd23f7222c5c15bb117923544c0f4ea7040c9573b8456520d2b5b43ec72c39bcb4d94b8196d352b864241edf998f5f9e6b38577aa32cb31ceb68ab14515bf8e07ff7510f3e61fd5122e311fd07f823c6c15da522eb707a6f09a8d0476825fbc439f3a8a40d2056010ac9e2339a32817f6f4bb6031484295", 0xf5}, {&(0x7f0000000280)="a275031cc08c84d77ac215d30c5187ef4ee4a40716b14806a4eabe7918351c794ff9669c4e1ba4c7837f212ef183c5604c691616751d8a4ce878ab9db0f76b5755902a40b7bbeaec3179fc2f52223f122b97dec46487fa09194931c607bcfd30f31cfa7a8f", 0x65}], 0x3, 0x9e74, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), 0x1020080, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c706503453f39726d69745f646972656374696f2c736d61636b66737472616e736d7574653d76657273696f6e3d39703230"]) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 2866.950213] syz-executor.3: attempt to access beyond end of device [ 2866.950213] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2866.951910] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2866.972205] loop7: detected capacity change from 0 to 264192 23:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2866.995046] syz-executor.3: attempt to access beyond end of device 23:21:27 executing program 1: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x10, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da04020b1d6b3774e", @ANYRESHEX=r0, @ANYBLOB="2c7766030000004451441332b5366fba4e3e72ef277c", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 2866.995046] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2866.996869] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2867.010260] loop5: detected capacity change from 0 to 264192 [ 2867.013983] syz-executor.3: attempt to access beyond end of device [ 2867.013983] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 23:21:27 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2867.016234] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2867.090652] loop7: detected capacity change from 0 to 264192 23:21:27 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file1/../file0\x00'}) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/../file0\x00', 0x20800, 0x10) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:21:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xfffffff6, 0x0) [ 2867.118119] 9pnet_fd: Insufficient options for proto=fd [ 2867.170627] loop3: detected capacity change from 0 to 40 [ 2867.203961] syz-executor.3: attempt to access beyond end of device [ 2867.203961] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2867.204843] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2867.212944] syz-executor.3: attempt to access beyond end of device [ 2867.212944] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2867.213823] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2867.227791] syz-executor.3: attempt to access beyond end of device [ 2867.227791] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2867.229107] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 2867.894868] 9pnet_fd: Insufficient options for proto=fd 23:21:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:21:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x64000000) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}]}}) 23:21:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d7bd9ebe27255047e35d12ba0fddd7c2417552ebadbbd4ea70a500c44d05a053762564a6e391b41f37949ea0bce74e8c2d6e63acb2a1df9bb945a74094f24c2d179a2ee2ffbe01a7f4b8ba42f98013d63f5c66cab5818c4d3cbda77e3141d640b180105cba8599d322582bd0d8ec776b0ca6c628723c4fce522493882bbe578e8f7268a2a3f3f74b3457c", @ANYRESHEX=r1, @ANYBLOB=',\x00']) connect$bt_sco(r1, &(0x7f0000000000), 0x8) 23:21:39 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000000000000, 0x0) 23:21:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYBLOB="082002124ac0415a0ce7a4f8bc243b15ab76cba1c917dc83321717a1f72f5cd2dd5fb0cc977fd13002453d3fd91aa5", @ANYRESDEC=r2], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20000, 0x11c) write(r4, &(0x7f0000000080)="01", 0x292e9) 23:21:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2879.257755] 9pnet_fd: Insufficient options for proto=fd [ 2879.275456] loop3: detected capacity change from 0 to 40 [ 2879.277302] loop7: detected capacity change from 0 to 264192 23:21:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2879.298798] loop5: detected capacity change from 0 to 264192 23:21:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c005934ea7b2d5c43ecce96f759598bf1"]) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) shutdown(r2, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000080)="01", 0x41030) openat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 2879.350414] syz-executor.3: attempt to access beyond end of device [ 2879.350414] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2879.351312] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2879.357545] Zero length message leads to an empty skb [ 2879.372508] syz-executor.3: attempt to access beyond end of device [ 2879.372508] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2879.373423] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2880.091002] 9pnet_fd: Insufficient options for proto=fd 23:21:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000000000000, 0x0) 23:21:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x600) syncfs(r0) write(r3, &(0x7f0000000080)="01", 0x292e9) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000300)={0x1, 0x5, @status={[0x0, 0x7ff, 0x9, 0x0, 0x7fff, 0x1]}, [0x3f, 0x1, 0x4, 0xb599, 0x8, 0x2, 0x7f, 0x7, 0x0, 0xa2, 0x5, 0x20, 0x5, 0x80, 0x5, 0x5, 0xf1e, 0x1f, 0x7, 0x1ff, 0x80, 0x100, 0x2c3, 0x401, 0x8, 0x21, 0x8001, 0x2, 0xc3f4, 0x3, 0x400, 0x4, 0x0, 0x151e, 0x35b2, 0x9, 0x0, 0x7, 0x4, 0x1, 0x7, 0xfffffffffffffe00, 0x4, 0xd4, 0x4, 0x100, 0x9, 0x100000000, 0x9, 0xfff, 0x59, 0x8, 0x7, 0x9, 0x2, 0x7cc, 0x2, 0x82da, 0x7fff, 0x7ff, 0x7e, 0x2, 0x4f576209, 0xff]}) 23:21:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:21:52 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = epoll_create1(0x80000) fsync(r2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) connect$bt_sco(r3, &(0x7f0000000200), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000004c0)={0x24, 0x0, 0x5e0d6ea19d7b1119, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000004c0)={0x24, r6, 0x5e0d6ea19d7b1119, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x7a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x804) shutdown(r3, 0x0) connect$bt_sco(r3, &(0x7f0000000000), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="025072022c7766", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:21:52 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nfs\x00', 0x20, &(0x7f0000000200)='\x00') openat(r0, &(0x7f0000000280)='./file0\x00', 0x80040, 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 2891.959147] loop7: detected capacity change from 0 to 264192 [ 2891.974427] loop3: detected capacity change from 0 to 40 [ 2891.983082] loop5: detected capacity change from 0 to 264192 23:21:52 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:21:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000000000000, 0x0) [ 2892.020886] 9pnet_fd: Insufficient options for proto=fd [ 2892.034875] 9pnet_fd: Insufficient options for proto=fd [ 2892.070589] syz-executor.3: attempt to access beyond end of device [ 2892.070589] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2892.072391] Buffer I/O error on dev loop3, logical block 10, lost async page write 23:21:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2892.079556] 9pnet_fd: Insufficient options for proto=fd [ 2892.119842] syz-executor.3: attempt to access beyond end of device [ 2892.119842] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 2892.121479] Buffer I/O error on dev loop3, logical block 31, lost async page write 23:21:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4e00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000180)='./file2\x00', 0x80000221) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0xa0000000) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 2892.182655] loop7: detected capacity change from 0 to 264192 23:21:52 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2892.197469] loop5: detected capacity change from 0 to 264192 23:21:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000000000000, 0x0) 23:21:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff2f0000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:21:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:21:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2892.309908] loop3: detected capacity change from 0 to 264192 [ 2892.359090] loop7: detected capacity change from 0 to 264192 [ 2892.827257] 9pnet_fd: Insufficient options for proto=fd 23:22:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:22:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000000000, 0x0) 23:22:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:22:06 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="bc73ff216e6f3dad1ca5377d1a2bb1b779e63ad8cfb43872b9706119662e907c4cfc0e22fc3c9e7c2d5f43828134f561d4196129138a3df29f52c2efee7410cad35a9a075f82c9698f5780d4d391168b38bf7cfc75df8720c9d2871e3cde449e9f7cff9c0d47a74c234a169241990fa122a5098befa1d68c89ba53003df38a3cf94c45aa0e633f6e37f8deab97d0187269907f7051c64786166c20cbea72c26bc011a9fef765712fb863c25df7678339", @ANYRESHEX=r2, @ANYBLOB="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"]) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={{r4, r5/1000+10000}}, 0x100) connect$bt_sco(r3, &(0x7f0000000200), 0x8) shutdown(r3, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) close_range(r3, r6, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:22:06 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:22:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2906.002069] loop7: detected capacity change from 0 to 264192 23:22:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$ptp(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f740)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {0x0, r3}], 0x0, "12f372f304289a"}) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8d4a2317f0ca217e", 0x8}]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7f}, 0x1a60b, 0x0, 0x0, 0x9, 0x7, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r9, 0x0, 0x10000027f) io_setup(0x1f, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000300)={r10, r11/1000+60000}, 0x10) 23:22:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d666e6f1d0000000000", @ANYRESHEX=r0, @ANYBLOB="2c6766646e146a6f1a1d00"/25, @ANYRESHEX=r1, @ANYBLOB=',\x00']) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffcb2, 0xff, 0x8, 0x3f, 0x2, 0x0, 0x7, 0xe617cd81eb9d59f, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xcdc9, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8936, 0x8, 0x6, 0x6, 0x0, 0x8001, 0x8, 0x0, 0x30c, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) [ 2906.011080] loop5: detected capacity change from 0 to 264192 23:22:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7400000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:22:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2906.068233] 9pnet_fd: Insufficient options for proto=fd 23:22:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 2906.095701] loop7: detected capacity change from 0 to 264192 23:22:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x1800000000000000, 0x0) [ 2906.133074] loop5: detected capacity change from 0 to 264192 [ 2906.215105] 9pnet: Could not find request transport: fno [ 2906.938659] 9pnet: Could not find request transport: fno 23:22:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:22:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:22:18 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da1c2abcaec140ded908a55f779bd833acf45ea28c32c0ef9c1dfc65fe4e67fc41efa31fc4dee17e61ddb98c716edef8fd12006f6720b838698de20ac585e8f8b8aca59bb0ce2335fd283320db3b961d59d4d933ea1c72869a46a0614fc539e24a380fbf41c9a228c2e2fa37078c7dc7a9105bc99f27c1ca3f7a44396e3bb8557bba70a8cab1320ad94585bd50bd82410b79dd55e986f84eecd98ffd757cb0b7be937c61c62138b", @ANYRESHEX=r1, @ANYBLOB="2c560c148993fb6dbc769d257766646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x12) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 23:22:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:22:18 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) 23:22:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:22:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002000000000000, 0x0) 23:22:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x1]}, 0x8, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001500)={@mcast2, 0x1}, 0x20) [ 2918.357981] loop5: detected capacity change from 0 to 264192 [ 2918.372525] loop7: detected capacity change from 0 to 264192 23:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:22:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2918.406630] 9pnet_fd: Insufficient options for proto=fd 23:22:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3401000000000000, 0x0) 23:22:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a00000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) 23:22:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0x0, 0x0, 0x7fff0000}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"ccc9e14375baec6442a71bfca0c00062", 0x0, r2, {0x6, 0x1b4}, {0x3, 0x9}, 0x80, [0x7fffffff, 0x3, 0x1, 0x2, 0x1, 0x401, 0x5fa4, 0x4, 0x100000000, 0xffff, 0x401, 0x7, 0x4, 0x8, 0x5, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000500000000000000e1a3000000000000ffff0003000000003200000000000000010000000000b641581f01000000000081000000000000000000000000008000000000000000f80104000000000000020000000000000002000000000000008b0000000000000000"]}, @devid}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r1, &(0x7f00000002c0)="2cadb913fc36f0b5d1807d8501a84e6bd1a4e666bf48e1666b7e29dfe3a09594203af0ecf361e7e40a5db0c1c7e08484b2be56f4c61c134c3b8ce9f8853766f429add36b3d38fe2dcc5c4fed57a7470139c1ee31c80cb01ac94d7ac98af68180e5c45385040ad2ec0438387dcc9dbcd4b8b9d82f4a2eadd422aca531465461da2bb8062784079d30673a108feb383c3b550f77eb5db01f5ceb1f8435b71fd301fbe8fb428e611392a1301e2392bca23b2f", 0xb1, 0x6, &(0x7f0000000140)) [ 2918.464825] loop5: detected capacity change from 0 to 264192 23:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dc873a45bf"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23:22:19 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40210, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='ns\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000200), 0x8) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2014}) r5 = getpid() r6 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r1, &(0x7f0000000000)={r6}) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0x8, @private2, 0x8}}, {{0xa, 0x4e21, 0x401, @remote, 0x8000}}}, 0x108) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 2918.490632] loop7: detected capacity change from 0 to 264192 23:22:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2918.549947] loop5: detected capacity change from 0 to 264192 [ 2918.787574] ================================================================== [ 2918.788612] BUG: KASAN: slab-use-after-free in hci_conn_hash_flush+0x201/0x240 [ 2918.789588] Read of size 8 at addr ffff888043602000 by task syz-executor.3/14135 [ 2918.790567] [ 2918.790804] CPU: 0 PID: 14135 Comm: syz-executor.3 Not tainted 6.3.0-rc7-next-20230421 #1 [ 2918.791869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.792961] Call Trace: [ 2918.793307] [ 2918.793619] dump_stack_lvl+0x91/0xf0 [ 2918.794143] print_report+0xcc/0x620 [ 2918.794670] ? __virt_addr_valid+0x102/0x340 [ 2918.795297] ? hci_conn_hash_flush+0x201/0x240 [ 2918.795926] kasan_report+0xc0/0xf0 [ 2918.796453] ? hci_conn_hash_flush+0x201/0x240 [ 2918.797078] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 2918.797713] hci_conn_hash_flush+0x201/0x240 [ 2918.798321] hci_dev_close_sync+0x57f/0xff0 [ 2918.798914] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 2918.799593] ? mark_held_locks+0x9e/0xe0 [ 2918.800146] hci_rfkill_set_block+0x17b/0x1c0 [ 2918.800764] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 2918.801439] rfkill_set_block+0x1fd/0x540 [ 2918.805043] rfkill_fop_write+0x2b7/0x540 [ 2918.805831] ? __pfx_rfkill_fop_write+0x10/0x10 [ 2918.806493] ? security_file_permission+0xb5/0xe0 [ 2918.807191] vfs_write+0x2d8/0xdd0 [ 2918.807696] ? __pfx_rfkill_fop_write+0x10/0x10 [ 2918.808358] ? __pfx_vfs_write+0x10/0x10 [ 2918.808931] ? __fget_files+0x270/0x480 [ 2918.809510] ? __fget_light+0xe5/0x280 [ 2918.810072] ksys_write+0x1f4/0x260 [ 2918.810589] ? __pfx_ksys_write+0x10/0x10 [ 2918.811169] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2918.811893] do_syscall_64+0x3f/0x90 [ 2918.812419] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2918.813128] RIP: 0033:0x7feb14f6ab19 [ 2918.813639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.816028] RSP: 002b:00007feb124e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2918.817036] RAX: ffffffffffffffda RBX: 00007feb1507df60 RCX: 00007feb14f6ab19 [ 2918.818002] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000008 [ 2918.818946] RBP: 00007feb14fc4f6d R08: 0000000000000000 R09: 0000000000000000 [ 2918.819899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2918.820853] R13: 00007ffdefb1adaf R14: 00007feb124e0300 R15: 0000000000022000 [ 2918.821809] [ 2918.822137] [ 2918.822377] Allocated by task 3883: [ 2918.822871] kasan_save_stack+0x22/0x50 [ 2918.823454] kasan_set_track+0x25/0x30 [ 2918.824005] __kasan_kmalloc+0x7f/0x90 [ 2918.824551] hci_conn_add+0xa3/0x14d0 [ 2918.825078] hci_connect_sco+0x3e7/0x1120 [ 2918.825649] sco_sock_connect+0x2c0/0x9c0 [ 2918.826235] __sys_connect_file+0x159/0x1a0 [ 2918.826840] __sys_connect+0x169/0x1a0 [ 2918.827400] __x64_sys_connect+0x73/0xb0 [ 2918.827972] do_syscall_64+0x3f/0x90 [ 2918.828491] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2918.829194] [ 2918.829432] Freed by task 14135: [ 2918.829891] kasan_save_stack+0x22/0x50 [ 2918.830458] kasan_set_track+0x25/0x30 [ 2918.831030] kasan_save_free_info+0x2e/0x50 [ 2918.831624] __kasan_slab_free+0x10a/0x190 [ 2918.832219] __kmem_cache_free+0xd1/0x2f0 [ 2918.832795] device_release+0xa6/0x240 [ 2918.833345] kobject_put+0x177/0x270 [ 2918.833869] put_device+0x1f/0x30 [ 2918.834367] hci_conn_del+0x29f/0x810 [ 2918.834899] hci_conn_unlink+0x211/0x390 [ 2918.835475] hci_conn_unlink+0x2a3/0x390 [ 2918.836039] hci_conn_hash_flush+0x195/0x240 [ 2918.836660] hci_dev_close_sync+0x57f/0xff0 [ 2918.837257] hci_rfkill_set_block+0x17b/0x1c0 [ 2918.837876] rfkill_set_block+0x1fd/0x540 [ 2918.838462] rfkill_fop_write+0x2b7/0x540 [ 2918.839061] vfs_write+0x2d8/0xdd0 [ 2918.839560] ksys_write+0x1f4/0x260 [ 2918.840067] do_syscall_64+0x3f/0x90 [ 2918.840586] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2918.841287] [ 2918.841528] Last potentially related work creation: [ 2918.842181] kasan_save_stack+0x22/0x50 [ 2918.842746] __kasan_record_aux_stack+0x95/0xb0 [ 2918.843401] __queue_work+0x622/0x12f0 [ 2918.843934] __queue_delayed_work+0x1c8/0x270 [ 2918.844550] queue_delayed_work_on+0xcd/0xd0 [ 2918.845159] sco_chan_del+0x1db/0x440 [ 2918.845709] __sco_sock_close+0x21e/0x770 [ 2918.846275] sco_sock_shutdown+0x155/0x370 [ 2918.846868] __sys_shutdown+0xf8/0x1c0 [ 2918.847433] __x64_sys_shutdown+0x54/0x80 [ 2918.848022] do_syscall_64+0x3f/0x90 [ 2918.848541] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2918.849243] [ 2918.849484] The buggy address belongs to the object at ffff888043602000 [ 2918.849484] which belongs to the cache kmalloc-4k of size 4096 [ 2918.851111] The buggy address is located 0 bytes inside of [ 2918.851111] freed 4096-byte region [ffff888043602000, ffff888043603000) [ 2918.852687] [ 2918.852927] The buggy address belongs to the physical page: [ 2918.853673] page:00000000cfbc8371 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43600 [ 2918.854895] head:00000000cfbc8371 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2918.855986] anon flags: 0x100000000010200(slab|head|node=0|zone=1) [ 2918.856823] page_type: 0xffffffff() [ 2918.857327] raw: 0100000000010200 ffff888008442140 0000000000000000 dead000000000001 [ 2918.858346] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2918.859363] page dumped because: kasan: bad access detected [ 2918.860107] [ 2918.860348] Memory state around the buggy address: [ 2918.860996] ffff888043601f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2918.861955] ffff888043601f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2918.862914] >ffff888043602000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2918.863874] ^ [ 2918.864337] ffff888043602080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2918.865289] ffff888043602100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2918.866244] ================================================================== [ 2918.867742] Disabling lock debugging due to kernel taint [ 2918.892126] general protection fault, probably for non-canonical address 0xe0c59c48600006e6: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 2918.893661] KASAN: maybe wild-memory-access in range [0x062d024300003730-0x062d024300003737] [ 2918.894744] CPU: 0 PID: 14135 Comm: syz-executor.3 Tainted: G B 6.3.0-rc7-next-20230421 #1 [ 2918.896033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.897122] RIP: 0010:hci_conn_cleanup+0x1c5/0x780 [ 2918.897814] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ef 04 00 00 48 89 da 49 89 5c 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ab 04 00 00 48 b8 22 01 00 00 00 00 ad de 4c 89 [ 2918.900181] RSP: 0018:ffff888045d4fab0 EFLAGS: 00010213 [ 2918.900898] RAX: dffffc0000000000 RBX: 062d024300003737 RCX: ffffffff83da26b3 [ 2918.901848] RDX: 00c5a048600006e6 RSI: 0000000000000008 RDI: ffff88801a614408 [ 2918.902783] RBP: ffff888043602000 R08: 0000000000000001 R09: 0000000000000000 [ 2918.903756] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a614400 [ 2918.904713] R13: ffff888043602260 R14: dffffc0000000000 R15: ffff8880100e8000 [ 2918.905662] FS: 00007feb124e0700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2918.906730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2918.907517] CR2: 00007ff84ee013d0 CR3: 00000000392b8000 CR4: 0000000000350ef0 [ 2918.908469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2918.909413] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2918.910349] Call Trace: [ 2918.910702] [ 2918.911043] hci_conn_del+0x29f/0x810 [ 2918.911588] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 2918.912236] hci_conn_hash_flush+0x19d/0x240 [ 2918.912850] hci_dev_close_sync+0x57f/0xff0 [ 2918.913474] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 2918.914136] ? mark_held_locks+0x9e/0xe0 [ 2918.914692] hci_rfkill_set_block+0x17b/0x1c0 [ 2918.915323] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 2918.916003] rfkill_set_block+0x1fd/0x540 [ 2918.916597] rfkill_fop_write+0x2b7/0x540 [ 2918.917174] ? __pfx_rfkill_fop_write+0x10/0x10 [ 2918.917837] ? security_file_permission+0xb5/0xe0 [ 2918.918516] vfs_write+0x2d8/0xdd0 [ 2918.919027] ? __pfx_rfkill_fop_write+0x10/0x10 [ 2918.919686] ? __pfx_vfs_write+0x10/0x10 [ 2918.920247] ? __fget_files+0x270/0x480 [ 2918.920809] ? __fget_light+0xe5/0x280 [ 2918.921353] ksys_write+0x1f4/0x260 [ 2918.921860] ? __pfx_ksys_write+0x10/0x10 [ 2918.922427] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2918.923164] do_syscall_64+0x3f/0x90 [ 2918.923676] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2918.924338] RIP: 0033:0x7feb14f6ab19 [ 2918.924809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.926984] RSP: 002b:00007feb124e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2918.927929] RAX: ffffffffffffffda RBX: 00007feb1507df60 RCX: 00007feb14f6ab19 [ 2918.928797] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000008 [ 2918.929667] RBP: 00007feb14fc4f6d R08: 0000000000000000 R09: 0000000000000000 [ 2918.930530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2918.931409] R13: 00007ffdefb1adaf R14: 00007feb124e0300 R15: 0000000000022000 [ 2918.932288] [ 2918.932591] Modules linked in: [ 2918.933216] ---[ end trace 0000000000000000 ]--- [ 2918.933830] RIP: 0010:hci_conn_cleanup+0x1c5/0x780 [ 2918.934480] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ef 04 00 00 48 89 da 49 89 5c 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ab 04 00 00 48 b8 22 01 00 00 00 00 ad de 4c 89 [ 2918.936683] RSP: 0018:ffff888045d4fab0 EFLAGS: 00010213 [ 2918.937365] RAX: dffffc0000000000 RBX: 062d024300003737 RCX: ffffffff83da26b3 [ 2918.938236] RDX: 00c5a048600006e6 RSI: 0000000000000008 RDI: ffff88801a614408 [ 2918.939137] RBP: ffff888043602000 R08: 0000000000000001 R09: 0000000000000000 [ 2918.940014] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a614400 [ 2918.940905] R13: ffff888043602260 R14: dffffc0000000000 R15: ffff8880100e8000 [ 2918.941800] FS: 00007feb124e0700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2918.942800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2918.943550] CR2: 00007ff84ee013d0 CR3: 00000000392b8000 CR4: 0000000000350ef0 [ 2918.944514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2918.945500] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2919.227193] 9pnet_fd: Insufficient options for proto=fd VM DIAGNOSIS: 23:22:19 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824fe265 RDI=ffffffff87f17c40 RBP=ffffffff87f17c00 RSP=ffff888045d4f4e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff87f17c00 R14=0000000000000010 R15=ffffffff824fe250 RIP=ffffffff824fe2bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feb124e0700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a3873ca368 CR3=00000000392b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff000000000000000000000000 XMM01=00000001000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007feb150517c800007feb150517c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff84496acf RDI=ffff888044d07670 RBP=ffff888044d076c8 RSP=ffff888044d07600 R8 =ffffffff861152e8 R9 =ffffffff861152ec R10=0000000000038001 R11=ffff888044d076b0 R12=ffff888044d076d0 R13=ffff888044d076b8 R14=ffff888044d076b1 R15=ffff888044d07670 RIP=ffffffff811315bc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feeb4a2f1f0 CR3=000000001a7aa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=732e64696b6c6262696c2f756e672d78 XMM02=00312e6f732e64696b6c6262696c2f75 XMM03=6e672d78756e696c2d34365f3638782f XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000